Free CAS-004 Exam Braindumps
CompTIA Advanced Security Practitioner (CASP+) CAS-004 Questions 256–260 (page: 53)

Updated On: 10-Feb-2026

A security architect updated the security policy to require a proper way to verify that packets received between two parties have not been tampered with and the connection remains private. Which of the following cryptographic techniques can be used to ensure the security policy is being enforced properly?

  1. MD5-based envelope method
  2. HMAC_SHA256
  3. PBKDF2
  4. PGP

Answer(s): B



A software assurance analyst reviews an SSH daemon’s source code and sees the following:
Based on this code snippet, which of the following attacks is MOST likely to succeed?

  1. Race condition
  2. Cross-site scripting
  3. Integer overflow
  4. Driver shimming

Answer(s): C



A security analyst for a managed service provider wants to implement the most up-to-date and effective security methodologies to provide clients with the best offerings. Which of the following resources would the analyst MOST likely adopt?

  1. OSINT
  2. ISO
  3. MITRE ATT&CK
  4. OWASP

Answer(s): C



A security manager wants to transition the organization to a zero trust architecture. To meet this requirement, the security manager has instructed administrators to remove trusted zones, role-based access, and one-time authentication. Which of the following will need to be implemented to achieve this objective? (Choose three.)

  1. Least privilege
  2. VPN
  3. Policy automation
  4. PKI
  5. Firewall
  6. Continuous validation
  7. Continuous integration
  8. IaaS

Answer(s): A,C,F



A security architect for a manufacturing company must ensure that a new acquisition of IoT devices is securely integrated into the company’s Infrastructure. The devices should not directly communicate with other endpoints on the network and must be subject to network traffic monitoring to identify anomalous traffic. Which of the following would be the BEST solution to meet these requirements?

  1. Block all outbound traffic and implement an inline firewall.
  2. Allow only wireless connections and proxy the traffic through a network tap.
  3. Establish an air-gapped network and implement an IDS.
  4. Use a separate VLAN with an ACL and implement network detection and response.

Answer(s): D



Viewing page 53 of 127
Viewing questions 261 - 265 out of 645 questions


Post your Comments and Discuss CompTIA CAS-004 exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!