Free CAS-004 Exam Braindumps
CompTIA Advanced Security Practitioner (CASP+) CAS-004 Questions 231–235 (page: 48)

Updated On: 10-Feb-2026

An organization is looking to establish more robust security measures by implementing PKI. Which of the following should the security analyst implement when considering mutual authentication?

  1. Perfect forward secrecy on both endpoints
  2. Shared secret for both endpoints
  3. Public keys on both endpoints
  4. A common public key on each endpoint
  5. A common private key on each endpoint

Answer(s): C



An organization's senior security architect would like to develop cyberdefensive strategies based on standardized adversary techniques, tactics, and procedures commonly observed. Which of the following would BEST support this objective?

  1. OSINT analysis
  2. The Diamond Model of Intrusion Analysis
  3. MITRE ATT&CK
  4. Deepfake generation
  5. Closed-source intelligence reporting

Answer(s): C



A developer wants to maintain integrity to each module of a program and ensure controls are in place to detect unauthorized code modification. Which of the following would be BEST for the developer to perform? (Choose two.)

  1. Utilize code signing by a trusted third party.
  2. Implement certificate-based authentication.
  3. Verify MD5 hashes.
  4. Compress the program with a password.
  5. Encrypt with 3DES.
  6. Make the DACL read-only.

Answer(s): A,C



A security solution uses a sandbox environment to execute zero-day software and collect indicators of compromise. Which of the following should the organization do to BEST take advantage of this solution?

  1. Develop an Nmap plug-in to detect the indicator of compromise.
  2. Update the organization's group policy.
  3. Include the signature in the vulnerability scanning tool.
  4. Deliver an updated threat signature throughout the EDR system.

Answer(s): D



A company wants to implement a new website that will be accessible via browsers with no mobile applications available. The new website will allow customers to submit sensitive medical information securely and receive online medical advice. The company already has multiple other websites where it provides various public health data and information. The new website must implement the following:
• The highest form of web identity validation
• Encryption of all web transactions
• The strongest encryption in-transit
• Logical separation based on data sensitivity
Other things that should be considered include:
• The company operates multiple other websites that use encryption.
• The company wants to minimize total expenditure.
• The company wants to minimize complexity.
Which of the following should the company implement on its new website? (Choose two.)

  1. Wildcard certificate
  2. EV certificate
  3. Mutual authentication
  4. Certificate pinning
  5. SSO
  6. HSTS

Answer(s): B



Viewing page 48 of 127
Viewing questions 236 - 240 out of 645 questions


Post your Comments and Discuss CompTIA CAS-004 exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!