Free CAS-004 Exam Braindumps
CompTIA Advanced Security Practitioner (CASP+) CAS-004 Questions 276–280 (page: 57)

Updated On: 10-Feb-2026

An organization thinks that its network has active, malicious activity on it. Which of the following capabilities would BEST help to expose the adversary?

  1. Installing a honeypot and other decoys
  2. Expanding SOC functions to include hunting
  3. Enumerating asset configurations
  4. Performing a penetration test

Answer(s): B



An engineering team has deployed a new VPN service that requires client certificates to be used in order to successfully connect. On iOS devices, however, the following error occurs after importing the .p12 certificate file:
mbedTLS: ca certificate is undefined
Which of the following is the root cause of this issue?

  1. iOS devices have an empty root certificate chain by default.
  2. OpenSSL is not configured to support PKCS#12 certificate files.
  3. The VPN client configuration is missing the CA private key.
  4. The iOS keychain imported only the client public and private keys.

Answer(s): D



A security engineer has been informed by the firewall team that a specific Windows workstation is part of a command-and-control network. The only information the security engineer is receiving is that the traffic is occurring on a non-standard port (TCP 40322). Which of the following commands should the security engineer use FIRST to find the malicious process?

  1. tcpdump
  2. netstat
  3. tasklist
  4. traceroute
  5. ipconfig

Answer(s): B



In a shared responsibility model for PaaS, which of the following is a customer's responsibility?

  1. Network security
  2. Physical security
  3. OS security
  4. Host infrastructure

Answer(s): C



A security engineer notices the company website allows users to select which country they reside in, such as the following example:
https://mycompany.com/main.php?Country=US
Which of the following vulnerabilities would MOST likely affect this site?

  1. SQL injection
  2. Remote file inclusion
  3. Directory traversal
  4. Unsecure references

Answer(s): D



Viewing page 57 of 127
Viewing questions 281 - 285 out of 645 questions


Post your Comments and Discuss CompTIA CAS-004 exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!