Free CAS-004 Exam Braindumps
CompTIA Advanced Security Practitioner (CASP+) CAS-004 Questions 201–205 (page: 42)

Updated On: 10-Feb-2026

A security analyst sees that a hacker has discovered some keys and they are being made available on a public website. The security analyst is then able to successfully decrypt that data using the keys from the website. Which of the following should the security analyst recommend to protect the affected data?

  1. Key rotation
  2. Key escrow
  3. Zeroization
  4. Cryptographic obfuscation

Answer(s): A



Which of the following is MOST commonly found in a network SLA contract?

  1. Price for extra services
  2. Performance metrics
  3. Service provider responsibility only
  4. Limitation of liability
  5. Confidentiality and non-disclosure

Answer(s): B



A security operations center analyst is investigating anomalous activity between a database server and an unknown external IP address and gathered the following data:
• dbadmin last logged in at 7:30 a.m. and logged out at 8:05 a.m.
• A persistent TCP/6667 connection to the external address was established at 7:55 a.m. The connection is still active.
• Other than bytes transferred to keep the connection alive, only a few kilobytes of data transfer every hour since the start of the connection.
• A sample outbound request payload from PCAP showed the ASCII content: "JOIN #community".
Which of the following is the MOST likely root cause?

  1. A SQL injection was used to exfiltrate data from the database server.
  2. The system has been hijacked for cryptocurrency mining.
  3. A botnet Trojan is installed on the database server.
  4. The dbadmin user is consulting the community for help via Internet Relay Chat.

Answer(s): C



Which of the following describes the system responsible for storing private encryption/decryption files with a third party to ensure these files are stored safely?

  1. Key escrow
  2. TPM
  3. Trust models
  4. Code signing

Answer(s): A



A security administrator has been tasked with hardening a domain controller against lateral movement attacks. Below is an output of running services:
Which of the following configuration changes must be made to complete this task?

  1. Stop the Print Spooler service and set the startup type to disabled.
  2. Stop the DNS Server service and set the startup type to disabled.
  3. Stop the Active Directory Web Services service and set the startup type to disabled.
  4. Stop Credential Manager service and leave the startup type to disabled.

Answer(s): A



Viewing page 42 of 127
Viewing questions 206 - 210 out of 645 questions


Post your Comments and Discuss CompTIA CAS-004 exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!