Free CAS-004 Exam Braindumps
CompTIA Advanced Security Practitioner (CASP+) CAS-004 Questions 321–325 (page: 66)

Updated On: 10-Feb-2026

SIMULATION
An organization is planning for disaster recovery and continuity of operations.
INSTRUCTIONS
Review the following scenarios and instructions. Match each relevant finding to the affected host.
After associating scenario 3 with the appropriate host(s), click the host to select the appropriate corrective action for that finding.
Each finding may only be used once.
If at any time you would like to bring back the initial state of the simulation, please click the Reset All button.

  1. See Explanation section for answer.

Answer(s): A

Explanation:

1- Directory Server
2-SCADA Master Controller
3-Modify the BGP Configuration



A cloud security architect has been tasked with selecting the appropriate solution given the following:
• The solution must allow the lowest RTO possible.
• The solution must have the least shared responsibility possible.
• Patching should be a responsibility of the CSP.
Which of the following solutions can BEST fulfil the requirements?

  1. PaaS
  2. IaaS
  3. Private
  4. SaaS

Answer(s): D



A network administrator who manages a Linux web server notices the following traffic:
http://comptia.org/../../../../etc/shadow
Which of the following is the BEST action for the network administrator to take to defend against this type of web attack?

  1. Validate the server certificate and trust chain.
  2. Validate the server input and append the input to the base directory path.
  3. Validate that the server is not deployed with default account credentials.
  4. Validate that multifactor authentication is enabled on the server for all user accounts.

Answer(s): B



A mobile application developer is creating a global, highly scalable, secure chat application. The developer would like to ensure the application is not susceptible to on-path attacks while the user is traveling in potentially hostile regions. Which of the following would BEST achieve that goal?

  1. Utilize the SAN certificate to enable a single certificate for all regions.
  2. Deploy client certificates to all devices in the network.
  3. Configure certificate pinning inside the application.
  4. Enable HSTS on the application's server side for all communication.

Answer(s): C



A corporation discovered its internet connection is saturated with traffic originating from multiple IP addresses across the internet. A security analyst needs to find a solution to address future occurrences of this type of attack.
Which of the following would be the BEST solution to meet this goal?

  1. Implementing cloud-scrubbing services
  2. Upgrading the internet link
  3. Deploying a web application firewall
  4. Provisioning a reverse proxy

Answer(s): A



Viewing page 66 of 127
Viewing questions 326 - 330 out of 645 questions


Post your Comments and Discuss CompTIA CAS-004 exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!