Free CAS-004 Exam Braindumps
CompTIA Advanced Security Practitioner (CASP+) CAS-004 Questions 271–275 (page: 56)

Updated On: 10-Feb-2026

A third-party organization has implemented a system that allows it to analyze customers’ data and deliver analysis results without being able to see the raw data. Which of the following is the organization implementing?

  1. Asynchronous keys
  2. Homomorphic encryption
  3. Data lake
  4. Machine learning

Answer(s): B



Which of the following communication protocols is used to create PANs with small, low-power digital radios and supports a large number of nodes?

  1. Zigbee
  2. Wi-Fi
  3. CAN
  4. Modbus
  5. DNP3

Answer(s): A



A software development company is building a new mobile application for its social media platform. The company wants to gain its users’ trust by reducing the risk of on-path attacks between the mobile client and its servers and by implementing stronger digital trust. To support users’ trust, the company has released the following internal guidelines:
• Mobile clients should verity the identity of all social media servers locally.
• Social media servers should improve TLS performance of their certificate status.
• Social media servers should inform the client to only use HTTPS.
Given the above requirements, which of the following should the company implement? (Choose two.)

  1. Quick UDP internet connection
  2. OCSP stapling
  3. Private CA
  4. DNSSEC
  5. CRL
  6. HSTS
  7. Distributed object model

Answer(s): B,F



Due to budget constraints, an organization created a policy that only permits vulnerabilities rated high and critical according to CVSS to be fixed or mitigated. A security analyst notices that many vulnerabilities that were previously scored as medium are now breaching higher thresholds. Upon further investigation, the analyst notices certain ratings are not aligned with the approved system categorization.
Which of the following can the analyst do to get a better picture of the risk while adhering to the organization’s policy?

  1. Align the exploitability metrics to the predetermined system categorization.
  2. Align the remediation levels to the predetermined system categorization.
  3. Align the impact subscore requirements to the predetermined system categorization.
  4. Align the attack vectors to the predetermined system categorization.

Answer(s): C



A cloud engineer is tasked with improving the responsiveness and security of a company’s cloud-based web application. The company is concerned that international users will experience increased latency.
Which of the following is the BEST technology to mitigate this concern?

  1. Caching
  2. Containerization
  3. Content delivery network
  4. Clustering

Answer(s): C



Viewing page 56 of 127
Viewing questions 276 - 280 out of 645 questions


Post your Comments and Discuss CompTIA CAS-004 exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!