Cisco
CompTIA
ISC
EC-Council
EXIN
Fortinet
ITIL
Juniper
Microsoft
VMware
Avaya
SAP
Google
NVIDIA
Salesforce
Amazon
Palo Alto Networks
ISC2
Splunk
ServiceNow
All Vendors
  2. Home
  3. Exams
  4. CompTIA
  5. CAS-004

CompTIA CAS-004 Exam Questions
CompTIA Advanced Security Practitioner (CASP+) CAS-004 (Page 7 )

Updated On: 5-Mar-2026
Page 7 of 127
PDF with 645 Questions

A security analyst is performing a vulnerability assessment on behalf of a client. The analyst must define what constitutes a risk to the organization.
Which of the following should be the analyst's FIRST action?

  1. Create a full inventory of information and data assets.
  2. Ascertain the impact of an attack on the availability of crucial resources.
  3. Determine which security compliance standards should be followed.
  4. Perform a full system penetration test to determine the vulnerabilities.

Answer(s): A



While investigating a security event, an analyst finds evidence that a user opened an email attachment from an unknown source. Shortly after the user opened the attachment, a group of servers experienced a large amount of network and resource activity. Upon investigating the servers, the analyst discovers the servers were encrypted by ransomware that is demanding payment within 48 hours or all data will be destroyed. The company has no response plans for ransomware.
Which of the following is the NEXT step the analyst should take after reporting the incident to the management team?

  1. Pay the ransom within 48 hours.
  2. Isolate the servers to prevent the spread.
  3. Notify law enforcement.
  4. Request that the affected servers be restored immediately.

Answer(s): B



A company plans to build an entirely remote workforce that utilizes a cloud-based infrastructure. The Chief Information Security Officer asks the security engineer to design connectivity to meet the following requirements:
-Only users with corporate-owned devices can directly access servers hosted by the cloud provider.
-The company can control what SaaS applications each individual user can access.
-User browser activity can be monitored.
Which of the following solutions would BEST meet these requirements?

  1. IAM gateway, MDM, and reverse proxy
  2. VPN, CASB, and secure web gateway
  3. SSL tunnel, DLP, and host-based firewall
  4. API gateway, UEM, and forward proxy

Answer(s): B



During a system penetration test, a security engineer successfully gained access to a shell on a Linux host as a standard user and wants to elevate the privilege levels.
Which of the following is a valid Linux post-exploitation method to use to accomplish this goal?

  1. Spawn a shell using sudo and an escape string such as sudo vim -c '!sh'.
  2. Perform ASIC password cracking on the host.
  3. Read the /etc/passwd file to extract the usernames.
  4. Initiate unquoted service path exploits.
  5. Use the UNION operator to extract the database schema.

Answer(s): A


Reference:

https://docs.rapid7.com/insightvm/elevating-permissions/



A systems administrator is in the process of hardening the host systems before connecting to the network. The administrator wants to add protection to the boot loader to ensure the hosts are secure before the OS fully boots.
Which of the following would provide the BEST boot loader protection?

  1. TPM
  2. HSM
  3. PKI
  4. UEFI/BIOS

Answer(s): D


Reference:

https://docs.vmware.com/en/VMware-vSphere/7.0/com.vmware.vsphere.security.doc/GUID-898217D4-689D-4EB5-866C-888353FE241C.html



Viewing page 7 of 127
Viewing questions 31 - 35 out of 645 questions



Post your Comments and Discuss CompTIA CAS-004 exam dumps with other Community members:

CAS-004 Exam Discussions & Posts

AI Tutor