Free CAS-004 Exam Braindumps
CompTIA Advanced Security Practitioner (CASP+) CAS-004 Questions 261–265 (page: 54)

Updated On: 10-Feb-2026

A digital forensics expert has obtained an ARM binary suspected of including malicious behavior. The expert would like to trace and analyze the ARM binary’s execution. Which of the following tools would BEST support this effort?

  1. objdump
  2. OllyDbg
  3. FTK Imager
  4. Ghidra

Answer(s): D



A software developer was just informed by the security team that the company’s product has several vulnerabilities. Most of these vulnerabilities were traced to code the developer did not write. The developer does not recognize some of the code, as it was in the software before the developer started on the program and is not tracked for licensing purposes. Which of the following would the developer MOST likely do to mitigate the risks and prevent further issues like these from occurring?

  1. Perform supply chain analysis and require third-party suppliers to implement vulnerability management programs.
  2. Perform software composition analysis and remediate vulnerabilities found in the software.
  3. Perform reverse engineering on the code and rewrite the code in a more secure manner.
  4. Perform fuzz testing and implement DAST in the code repositories to find vulnerabilities prior to deployment.

Answer(s): B



A significant weather event caused all systems to fail over to the disaster recovery site successfully. However, successful data replication has not occurred in the last six months, which has resulted in the service being unavailable. Which of the following would BEST prevent this scenario form happening again?

  1. Performing routine tabletop exercises
  2. Implementing scheduled, full interruption tests
  3. Backing up system log reviews
  4. Performing department disaster recovery walk-throughs

Answer(s): B



An organization developed an incident response plan. Which of the following would be BEST to assess the effectiveness of the plan?

  1. Requesting a third-party review
  2. Generating a checklist by organizational unit
  3. Establishing role succession and call lists
  4. Creating a playbook
  5. Performing a tabletop exercise

Answer(s): E



A new mandate by the corporate security team requires that all endpoints must meet a security baseline before accessing the corporate network. All servers and desktop computers are scanned by the dedicated internal scanner appliance installed in each subnet. However, remote worker laptops do not access the network regularly. Which of the following is the BEST option for the security team to ensure remote worker laptops are scanned before being granted access to the corporate network?

  1. Implement network access control to perform host validation of installed patches.
  2. Create an 802.1X implementation with certificate-based device identification.
  3. Create a vulnerability scanning subnet for remote workers to connect to on the network at headquarters.
  4. Install a vulnerability scanning agent on each remote laptop to submit scan data.

Answer(s): A



Viewing page 54 of 127
Viewing questions 266 - 270 out of 645 questions


Post your Comments and Discuss CompTIA CAS-004 exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!