Free CAS-004 Exam Braindumps
CompTIA Advanced Security Practitioner (CASP+) CAS-004 Questions 161–165 (page: 34)

Updated On: 10-Feb-2026

A company invested a total of $10 million for a new storage solution installed across five on-site datacenters. Fifty percent of the cost of this investment was for solid-state storage. Due to the high rate of wear on this storage, the company is estimating that 5% will need to be replaced per year. Which of the following is the
ALE due to storage replacement?

  1. $50,000
  2. $125,000
  3. $250,000
  4. $500,000
  5. $1,000,000

Answer(s): C



A security architect was asked to modify an existing internal network design to accommodate the following requirements for RDP:
-Enforce MFA for RDP.
-Ensure RDP connections are only allowed with secure ciphers.
The existing network is extremely complex and not well segmented. Because of these limitations, the company has requested that the connections not be restricted by network-level firewalls or ACLs.
Which of the following should the security architect recommend to meet these requirements?

  1. Implement a reverse proxy for remote desktop with a secure cipher configuration enforced.
  2. Implement a bastion host with a secure cipher configuration enforced.
  3. Implement a remote desktop gateway server, enforce secure ciphers, and configure to use OTP.
  4. Implement a GPO that enforces TLS cipher suites and limits remote desktop access to only VPN users.

Answer(s): C



An organization is deploying a new, online digital bank and needs to ensure availability and performance. The cloud-based architecture is deployed using PaaS and SaaS solutions, and it was designed with the following considerations:
-Protection from DoS attacks against its infrastructure and web applications is in place.
-Highly available and distributed DNS is implemented.
-Static content is cached in the CDN.
-A WAF is deployed inline and is in block mode.
-Multiple public clouds are utilized in an active-passive architecture.
With the above controls in place, the bank is experiencing a slowdown on the unauthenticated payments page. Which of the following is the MOST likely cause?

  1. The public cloud provider is applying QoS to the inbound customer traffic.
  2. The API gateway endpoints are being directly targeted.
  3. The site is experiencing a brute-force credential attack.
  4. A DDoS attack is targeted at the CDN.

Answer(s): B



A healthcare system recently suffered from a ransomware incident. As a result, the board of directors decided to hire a security consultant to improve existing network security. The security consultant found that the healthcare network was completely flat, had no privileged access limits, and had open RDP access to servers with personal health information. As the consultant builds the remediation plan, which of the following solutions would BEST solve these challenges?
(Choose three.)

  1. SD-WAN
  2. PAM
  3. Remote access VPN
  4. MFA
  5. Network segmentation
  6. BGP
  7. NAC

Answer(s): B,C,E



A Chief Information Security Officer (CISO) is concerned that a company's current data disposal procedures could result in data remanence. The company uses only SSDs. Which of the following would be the MOST secure way to dispose of the SSDs given the CISO's concern?

  1. Degaussing
  2. Overwriting
  3. Shredding
  4. Formatting
  5. Incinerating

Answer(s): C



Viewing page 34 of 127
Viewing questions 166 - 170 out of 645 questions


Post your Comments and Discuss CompTIA CAS-004 exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!