Free CAS-004 Exam Braindumps
CompTIA Advanced Security Practitioner (CASP+) CAS-004 Questions 141–145 (page: 30)

Updated On: 10-Feb-2026

A business wants to migrate its workloads from an exclusively on-premises IT infrastructure to the cloud but cannot implement all the required controls. Which of the following BEST describes the risk associated with this implementation?

  1. Loss of governance
  2. Vendor lockout
  3. Compliance risk
  4. Vendor lock-in

Answer(s): C



A security architect needs to implement a CASB solution for an organization with a highly distributed remote workforce. One of the requirements for the implementation includes the capability to discover SaaS applications and block access to those that are unapproved or identified as risky. Which of the following would BEST achieve this objective?

  1. Deploy endpoint agents that monitor local web traffic to enforce DLP and encryption policies.
  2. Implement cloud infrastructure to proxy all user web traffic to enforce DLP and encryption policies.
  3. Implement cloud infrastructure to proxy all user web traffic and control access according to centralized policy.
  4. Deploy endpoint agents that monitor local web traffic and control access according to centralized policy.

Answer(s): C



During a phishing exercise, a few privileged users ranked high on the failure list. The enterprise would like to ensure that privileged users have an extra security- monitoring control in place. Which of the following is the MOST likely solution?

  1. A WAF to protect web traffic
  2. User and entity behavior analytics
  3. Requirements to change the local password
  4. A gap analysis

Answer(s): B



An analyst is evaluating the security of a web application that does not hold sensitive or financial data. The application requires users to have a minimum password length of 12 characters. One of the characters must be capitalized, and one must be a number. To reset the password, the user is asked to provide the birthplace, birthdate, and mother's maiden name. When all of these are entered correctly, a new password is emailed to the user. Which of the following should concern the analyst the MOST?

  1. The security answers may be determined via online reconnaissance.
  2. The password is too long, which may encourage users to write the password down.
  3. The password should include a special character.
  4. The minimum password length is too short.

Answer(s): A



In a cloud environment, the provider offers relief to an organization's teams by sharing in many of the operational duties. In a shared responsibility model, which of the following responsibilities belongs to the provider in a PaaS implementation?

  1. Application-specific data assets
  2. Application user access management
  3. Application-specific logic and code
  4. Application/platform software

Answer(s): D



Viewing page 30 of 127
Viewing questions 146 - 150 out of 645 questions


Post your Comments and Discuss CompTIA CAS-004 exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!