support@Free-Braindumps.com
Register Login
Cisco
CompTIA
ISC
EC-Council
EXIN
Fortinet
ITIL
Juniper
Microsoft
VMware
Avaya
SAP
Google
NVIDIA
Salesforce
Amazon
Palo Alto Networks
ISC2
CrowdStrike
Anthropic
All Vendors
  1. Home
  2. Exams
  3. CompTIA
  4. CAS-004

Free CAS-004 Exam Braindumps
CompTIA Advanced Security Practitioner (CASP+) CAS-004 Questions 151–155 (page: 32)

Updated On: 10-Feb-2026
Page 32 of 127
PDF with 645 Questions

A security analyst is evaluating the security of an online customer banking system. The analyst has a 12-character password for the test account. At the login screen, the analyst is asked to enter the third, eighth, and eleventh characters of the password. Which of the following describes why this request is a security concern? (Choose two.)

  1. The request is evidence that the password is more open to being captured via a keylogger.
  2. The request proves that salt has not been added to the password hash, thus making it vulnerable to rainbow tables.
  3. The request proves the password is encoded rather than encrypted and thus less secure as it can be easily reversed.
  4. The request proves a potential attacker only needs to be able to guess or brute force three characters rather than 12 characters of the password.
  5. The request proves the password is stored in a reversible format, making it readable by anyone at the bank who is given access.
  6. The request proves the password must be in cleartext during transit, making it open to on-path attacks.

Answer(s): D,E



A company launched a new service and created a landing page within its website network for users to access the service. Per company policy, all websites must utilize encryption for any authentication pages. A junior network administrator proceeded to use an outdated procedure to order new certificates. Afterward, customers are reporting the following error when accessing a new web page: NET:ERR_CERT_COMMON_NAME_INVALID. Which of the following BEST describes what the administrator should do NEXT?

  1. Request a new certificate with the correct subject alternative name that includes the new websites.
  2. Request a new certificate with the correct organizational unit for the company's website.
  3. Request a new certificate with a stronger encryption strength and the latest cipher suite.
  4. Request a new certificate with the same information but including the old certificate on the CRL.

Answer(s): A


Reference:

https://knowledge.digicert.com/solution/SO9440.html



A large number of emails have been reported, and a security analyst is reviewing the following information from the emails:
As part of the triage process, which of the following is the FIRST step the analyst should take?

  1. Block the email address carl.b@comptia1.com, as it is sending spam to subject matter experts.
  2. Validate the final ג€Receivedג€ header against the DNS entry of the domain.
  3. Compare the ג€Return-Pathג€ and ג€Receivedג€ fields.
  4. Ignore the emails, as SPF validation is successful, and it is a false positive.

Answer(s): B


Reference:

https://sendgrid.com/blog/what-is-return-path/



Which of the following is the BEST disaster recovery solution when resources are running in a cloud environment?

  1. Remote provider BCDR
  2. Cloud provider BCDR
  3. Alternative provider BCDR
  4. Primary provider BCDR

Answer(s): B


Reference:

https://www.cloudoye.com/blog/disaster-recovery/how-cloud-based-bcdr-is-transforming-traditional-bcdr-practices



An auditor is reviewing the logs from a web application to determine the source of an incident. The web application architecture includes an Internet-accessible application load balancer, a number of web servers in a private subnet, application servers, and one database server in a tiered configuration. The application load balancer cannot store the logs. The following are sample log snippets:
Which of the following should the auditor recommend to ensure future incidents can be traced back to the sources?

  1. Enable the X-Forwarded-For header at the load balancer.
  2. Install a software-based HIDS on the application servers.
  3. Install a certificate signed by a trusted CA.
  4. Use stored procedures on the database server.
  5. Store the value of the $_SERVER['REMOTE_ADDR'] received by the web servers.

Answer(s): A


Reference:

https://www.keyfactor.com/blog/self-signed-certificate-risks/



  PDF
Viewing page 32 of 127
Viewing questions 156 - 160 out of 645 questions


Post your Comments and Discuss CompTIA CAS-004 exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!