Free CAS-004 Exam Braindumps
CompTIA Advanced Security Practitioner (CASP+) CAS-004 Questions 246–250 (page: 51)

Updated On: 10-Feb-2026

A company has received threat intelligence about bad routes being advertised. The company has also been receiving reports of degraded internet activity. When looking at the routing table on the edge router, a security engineer discovers the following:
Which of the following can the company implement to prevent receiving bad routes from peers, while still allowing dynamic updates?

  1. OSPF prefix list
  2. BGP prefix list
  3. EIGRP prefix list
  4. DNS

Answer(s): B



A company has moved its sensitive workloads to the cloud and needs to ensure high availability and resiliency of its web-based application. The cloud architecture team was given the following requirements:
• The application must run at 70% capacity at all times
• The application must sustain DoS and DDoS attacks.
• Services must recover automatically.
Which of the following should the cloud architecture team implement? (Choose three.)

  1. Read-only replicas
  2. BCP
  3. Autoscaling
  4. WAF
  5. CDN
  6. Encryption
  7. Continuous snapshots
  8. Containerization

Answer(s): C,D,E



A security architect is implementing a web application that uses a database back end. Prior to production, the architect is concerned about the possibility of XSS attacks and wants to identify security controls that could be put in place to prevent these attacks. Which of the following sources could the architect consult to address this security concern?

  1. SDLC
  2. OVAL
  3. IEEE
  4. OWASP

Answer(s): D



A security architect is working with a new customer to find a vulnerability assessment solution that meets the following requirements:
• Fast scanning
• The least false positives possible
• Signature-based
• A low impact on servers when performing a scan
In addition, the customer has several screened subnets, VLANs, and branch offices. Which of the following will BEST meet the customer's needs?

  1. Authenticated scanning
  2. Passive scanning
  3. Unauthenticated scanning
  4. Agent-based scanning

Answer(s): D



Real-time, safety-critical systems MOST often use serial busses that:

  1. have non-deterministic behavior and are not deployed with encryption.
  2. have non-deterministic behavior and are deployed with encryption.
  3. have deterministic behavior and are deployed with encryption.
  4. have deterministic behavior and are not deployed with encryption.

Answer(s): D



Viewing page 51 of 127
Viewing questions 251 - 255 out of 645 questions


Post your Comments and Discuss CompTIA CAS-004 exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!