Free CAS-004 Exam Braindumps
CompTIA Advanced Security Practitioner (CASP+) CAS-004 Questions 221–225 (page: 46)

Updated On: 10-Feb-2026

Which of the following BEST describes a common use case for homomorphic encryption?

  1. Processing data on a server after decrypting in order to prevent unauthorized access in transit
  2. Maintaining the confidentiality of data both at rest and in transit to and from a CSP for processing
  3. Transmitting confidential data to a CSP for processing on a large number of resources without revealing information
  4. Storing proprietary data across multiple nodes in a private cloud to prevent access by unauthenticated users

Answer(s): C



A security analyst runs a vulnerability scan on a network administrator's workstation. The network administrator has direct administrative access to the company’s SSO web portal. The vulnerability scan uncovers critical vulnerabilities with equally high CVSS scores for the user's browser, OS, email client, and an offline password manager. Which of the following should the security analyst patch FIRST?

  1. Email client
  2. Password manager
  3. Browser
  4. OS

Answer(s): D



An organization is moving its intellectual property data from on premises to a CSP and wants to secure the data from theft. Which of the following can be used to mitigate this risk?

  1. An additional layer of encryption
  2. A third-party, data integrity monitoring solution
  3. A complete backup that is created before moving the data
  4. Additional application firewall rules specific to the migration

Answer(s): A



A software developer is working on a piece of code required by a new software package. The code should use a protocol to verify the validity of a remote identity. Which of the following should the developer implement in the code?

  1. RSA
  2. OCSP
  3. HSTS
  4. CRL

Answer(s): B



Users are reporting intermittent access issues with a new cloud application that was recently added to the network. Upon investigation, the security administrator notices the human resources department is able to run required queries with the new application, but the marketing department is unable to pull any needed reports on various resources using the new application. Which of the following MOST likely needs to be done to avoid this in the future?

  1. Modify the ACLs.
  2. Review the Active Directory.
  3. Update the marketing department's browser.
  4. Reconfigure the WAF.

Answer(s): A



Viewing page 46 of 127
Viewing questions 226 - 230 out of 645 questions


Post your Comments and Discuss CompTIA CAS-004 exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!