Free CAS-004 Exam Braindumps
CompTIA Advanced Security Practitioner (CASP+) CAS-004 Questions 211–215 (page: 44)

Updated On: 10-Feb-2026

A hospitality company experienced a data breach that included customer PII. The hacker used social engineering to convince an employee to grant a third-party application access to some company documents within a cloud file storage service Which of the following is the BEST solution to help prevent this type of attack in the future?

  1. NGFW for web traffic inspection and activity monitoring
  2. CSPM for application configuration control
  3. Targeted employee training and awareness exercises
  4. CASB for OAuth application permission control

Answer(s): C



A product manager at a new company needs to ensure the development team produces high-quality code on time. The manager has decided to implement an agile development approach instead of waterfall. Which of the following are reasons to choose an agile development approach? (Choose two.)

  1. The product manager gives the developers more autonomy to write quality code prior to deployment.
  2. An agile approach incorporates greater application security in the development process than a waterfall approach does.
  3. The scope of work is expected to evolve during the lifetime of project development.
  4. The product manager prefers to have code iteratively tested throughout development.
  5. The product manager would like to produce code in linear phases.
  6. Budgeting and creating a timeline for the entire project is often more straightforward using an agile approach rather than waterfall.

Answer(s): C,D



An auditor needs to scan documents at rest for sensitive text. These documents contain both text and images. Which of the following software functionalities must be enabled in the DLP solution for the auditor to be able to fully read these documents? (Choose two.)

  1. Document interpolation
  2. Regular expression pattern matching
  3. Optical character recognition functionality
  4. Baseline image matching
  5. Advanced rasterization
  6. Watermarking

Answer(s): B,C



A security analyst is performing a review of a web application. During testing as a standard user, the following error log appears:
Which of the following BEST describes the analyst's findings and a potential mitigation technique?

  1. The findings indicate unsecure references. All potential user input needs to be properly sanitized.
  2. The findings indicate unsecure protocols All cookies should be marked as HttpOnly.
  3. The findings indicate information disclosure. The displayed error message should be modified.
  4. The findings indicate a SQL injection. The database needs to be upgraded.

Answer(s): C



A local university that has a global footprint is undertaking a complete overhaul of its website and associated systems Some of the requirements are:
• Handle an increase in customer demand of resources
• Provide quick and easy access to information
• Provide high-quality streaming media
• Create a user-friendly interface
Which of the following actions should be taken FIRST?

  1. Deploy high-availability web servers.
  2. Enhance network access controls.
  3. Implement a content delivery network.
  4. Migrate to a virtualized environment.

Answer(s): C



Viewing page 44 of 127
Viewing questions 216 - 220 out of 645 questions


Post your Comments and Discuss CompTIA CAS-004 exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!