Free CAS-004 Exam Braindumps
CompTIA Advanced Security Practitioner (CASP+) CAS-004 Questions 286–290 (page: 59)

Updated On: 10-Feb-2026

A security administrator sees several hundred entries in a web server security log that are similar to the following:
The network source varies, but the URL, status, and user agent are the same. Which of the following would BEST protect the web server without blocking legitimate traffic?

  1. Replace the file xmlrpc.php with a honeypot form to collect further IOCs.
  2. Automate the addition of bot IP addresses into a deny list for the web host.
  3. Script the daily collection of the WHOIS ranges to add to the WAF as a denied ACL.
  4. Block every subnet that is identified as having a bot that is a source of the traffic.

Answer(s): B



An organization had been leveraging RC4 to protect the confidentiality of a continuous, high-throughput 4K video stream but must upgrade to a more modern cipher. The new cipher must maximize speed, particularly on endpoints without crypto instruction sets or coprocessors. Which of the following is MOST likely to meet the organization's requirements?

  1. ChaCha20
  2. ECDSA
  3. Blowfish
  4. AES-GCM
  5. AES-CBC

Answer(s): A



Which of the following processes involves searching and collecting evidence during an investigation or lawsuit?

  1. E-discovery
  2. Review analysis
  3. Information governance
  4. Chain of custody

Answer(s): A



A domestic, publicly traded, online retailer that sells makeup would like to reduce the risks to the most sensitive type of data within the organization but also the impact to compliance. A risk analyst is performing an assessment of the collection and processing of data used within business processes. Which of the following types of data pose the GREATEST risk? (Choose two.)

  1. Financial data from transactions
  2. Shareholder meeting minutes
  3. Data of possible European customers
  4. Customers' shipping addresses
  5. Deidentified purchasing habits
  6. Consumer product purchasing trends

Answer(s): A,C



A security engineer is creating a single CSR for the following web server hostnames:
• wwwint.internal
• www.company.com
• home.internal
• www.internal
Which of the following would meet the requirement?

  1. SAN
  2. CN
  3. CA
  4. CRL
  5. Issuer

Answer(s): A



Viewing page 59 of 127
Viewing questions 291 - 295 out of 645 questions


Post your Comments and Discuss CompTIA CAS-004 exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!