Free CAS-004 Exam Braindumps
CompTIA Advanced Security Practitioner (CASP+) CAS-004 Questions 171–175 (page: 36)

Updated On: 10-Feb-2026

A BIA of a popular online retailer identified several mission-essential functions that would take more than seven days to recover in the event of an outage. Which of the following should be considered when setting priorities for the restoration of these functions?

  1. Supply chain issues
  2. Revenue generation
  3. Warm-site operations
  4. Scheduled impacts to future projects

Answer(s): B



A software development company makes its software version available to customers from a web portal. On several occasions, hackers were able to access the software repository to change the package that is automatically published on the website. Which of the following would be the technique to ensure the software the users download is the official software released by the company?

  1. Distribute the software via a third-party repository.
  2. Close the web repository and deliver the software via email.
  3. Email the software link to all customers.
  4. Display the SHA checksum on the website.

Answer(s): D



An organization decided to begin issuing corporate mobile device users microSD HSMs that must be installed in the mobile devices in order to access corporate resources remotely. Which of the following features of these devices MOST likely led to this decision? (Choose two.)

  1. Software-backed keystore
  2. Embedded cryptoprocessor
  3. Hardware-backed public key storage
  4. Support for stream ciphers
  5. Decentralized key management
  6. TPM 2.0 attestation services

Answer(s): B,C



A company recently acquired a SaaS provider and needs to integrate its platform into the company's existing infrastructure without impact to the customer's experience. The SaaS provider does not have a mature security program. A recent vulnerability scan of the SaaS provider's systems shows multiple critical vulnerabilities attributed to very old and outdated OSs. Which of the following solutions would prevent these vulnerabilities from being introduced into the company's existing infrastructure?

  1. Segment the systems to reduce the attack surface if an attack occurs.
  2. Migrate the services to new systems with a supported and patched OS.
  3. Patch the systems to the latest versions of the existing OSs.
  4. Install anti-malware, HIPS, and host-based firewalls on each of the systems.

Answer(s): B



A company was recently infected by malware. During the root cause analysis, the company determined that several users were installing their own applications.
To prevent further compromises, the company has decided it will only allow authorized applications to run on its systems. Which of the following should the company implement?

  1. Signing
  2. Access control
  3. HIPS
  4. Permit listing

Answer(s): D



Viewing page 36 of 127
Viewing questions 176 - 180 out of 645 questions


Post your Comments and Discuss CompTIA CAS-004 exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!