Free CAS-004 Exam Braindumps
CompTIA Advanced Security Practitioner (CASP+) CAS-004 Questions 156–160 (page: 33)

Updated On: 10-Feb-2026

Due to internal resource constraints, the management team has asked the principal security architect to recommend a solution that shifts partial responsibility for application-level controls to the cloud provider. In the shared responsibility model, which of the following levels of service meets this requirement?

  1. IaaS
  2. SaaS
  3. FaaS
  4. PaaS

Answer(s): D



A security analyst needs to recommend a remediation to the following threat:
Which of the following actions should the security analyst propose to prevent this successful exploitation?

  1. Patch the system.
  2. Update the antivirus.
  3. Install a host-based firewall.
  4. Enable TLS 1.2.

Answer(s): A


Reference:

https://www.cloudflare.com/learning/ssl/transport-layer-security-tls/



An organization requires a legacy system to incorporate reference data into a new system. The organization anticipates the legacy system will remain in operation for the next 18 to 24 months. Additionally, the legacy system has multiple critical vulnerabilities with no patches available to resolve them. Which of the following is the BEST design option to optimize security?

  1. Limit access to the system using a jump box.
  2. Place the new system and legacy system on separate VLANs.
  3. Deploy the legacy application on an air-gapped system.
  4. Implement MFA to access the legacy system.

Answer(s): C



An attacker infiltrated an electricity-generation site and disabled the safety instrumented system. Ransomware was also deployed on the engineering workstation.
The environment has back-to-back firewalls separating the corporate and OT systems. Which of the following is the MOST likely security consequence of this attack?

  1. A turbine would overheat and cause physical harm.
  2. The engineers would need to go to the historian.
  3. The SCADA equipment could not be maintained.
  4. Data would be exfiltrated through the data diodes.

Answer(s): C



Which of the following is required for an organization to meet the ISO 27018 standard?

  1. All PII must be encrypted.
  2. All network traffic must be inspected.
  3. GDPR equivalent standards must be met.
  4. COBIT equivalent standards must be met.

Answer(s): C



Viewing page 33 of 127
Viewing questions 161 - 165 out of 645 questions


Post your Comments and Discuss CompTIA CAS-004 exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!