Cisco
CompTIA
ISC
EC-Council
EXIN
Fortinet
ITIL
Juniper
Microsoft
VMware
Avaya
SAP
Google
NVIDIA
Salesforce
Amazon
Palo Alto Networks
ISC2
Splunk
ServiceNow
All Vendors
  2. Home
  3. Exams
  4. CompTIA
  5. CAS-004

CompTIA CAS-004 Exam Questions
CompTIA Advanced Security Practitioner (CASP+) CAS-004 (Page 6 )

Updated On: 5-Mar-2026
Page 6 of 127
PDF with 645 Questions

A high-severity vulnerability was found on a web application and introduced to the enterprise. The vulnerability could allow an unauthorized user to utilize an open- source library to view privileged user information. The enterprise is unwilling to accept the risk, but the developers cannot fix the issue right away.
Which of the following should be implemented to reduce the risk to an acceptable level until the issue can be fixed?

  1. Scan the code with a static code analyzer, change privileged user passwords, and provide security training.
  2. Change privileged usernames, review the OS logs, and deploy hardware tokens.
  3. Implement MFA, review the application logs, and deploy a WAF.
  4. Deploy a VPN, configure an official open-source library repository, and perform a full application review for vulnerabilities.

Answer(s): C


Reference:

https://www.microfocus.com/en-us/what-is/sast



A security analyst discovered that the company's WAF was not properly configured. The main web server was breached, and the following payload was found in one of the malicious requests:
Which of the following would BEST mitigate this vulnerability?

  1. CAPTCHA
  2. Input validation
  3. Data encoding
  4. Network intrusion prevention

Answer(s): B


Reference:

https://hdivsecurity.com/owasp-xml-external-entities-xxe



A university issues badges through a homegrown identity management system to all staff and students. Each week during the summer, temporary summer school students arrive and need to be issued a badge to access minimal campus resources. The security team received a report from an outside auditor indicating the homegrown system is not consistent with best practices in the security field and leaves the institution vulnerable.
Which of the following should the security team recommend FIRST?

  1. Investigating a potential threat identified in logs related to the identity management system
  2. Updating the identity management system to use discretionary access control
  3. Beginning research on two-factor authentication to later introduce into the identity management system
  4. Working with procurement and creating a requirements document to select a new IAM system/vendor

Answer(s): A



A customer reports being unable to connect to a website at www.test.com to consume services. The customer notices the web application has the following published cipher suite:
Which of the following is the MOST likely cause of the customer's inability to connect?

  1. Weak ciphers are being used.
  2. The public key should be using ECDSA.
  3. The default should be on port 80.
  4. The server name should be test.com.

Answer(s): A


Reference:

https://security.stackexchange.com/questions/23383/ssh-key-type-rsa-dsa-ecdsa-are-there-easy-answers-for-which-to-choose-when



An IT administrator is reviewing all the servers in an organization and notices that a server is missing crucial practice against a recent exploit that could gain root access.
Which of the following describes the administrator's discovery?

  1. A vulnerability
  2. A threat
  3. A breach
  4. A risk

Answer(s): A


Reference:

https://www.beyondtrust.com/blog/entry/privilege-escalation-attack-defense-explained



Viewing page 6 of 127
Viewing questions 26 - 30 out of 645 questions



Post your Comments and Discuss CompTIA CAS-004 exam dumps with other Community members:

CAS-004 Exam Discussions & Posts

AI Tutor