Cisco
CompTIA
ISC
EC-Council
EXIN
Fortinet
ITIL
Juniper
Microsoft
VMware
Avaya
SAP
Google
NVIDIA
Salesforce
Amazon
Palo Alto Networks
ISC2
Splunk
ServiceNow
All Vendors
  2. Home
  3. Exams
  4. CompTIA
  5. CAS-004

CompTIA CAS-004 Exam Questions
CompTIA Advanced Security Practitioner (CASP+) CAS-004 (Page 9 )

Updated On: 5-Mar-2026
Page 9 of 127
PDF with 645 Questions

Which of the following is a benefit of using steganalysis techniques in forensic response?

  1. Breaking a symmetric cipher used in secure voice communications
  2. Determining the frequency of unique attacks against DRM-protected media
  3. Maintaining chain of custody for acquired evidence
  4. Identifying least significant bit encoding of data in a .wav file

Answer(s): D


Reference:

https://www.garykessler.net/library/fsc_stego.html



A new web server must comply with new secure-by-design principles and PCI DSS. This includes mitigating the risk of an on-path attack. A security analyst is reviewing the following web server configuration:
Which of the following ciphers should the security analyst remove to support the business requirements?

  1. TLS_AES_128_CCM_8_SHA256
  2. TLS_DHE_DSS_WITH_RC4_128_SHA
  3. TLS_CHACHA20_POLY1305_SHA256
  4. TLS_AES_128_GCM_SHA256

Answer(s): B



A security analyst notices a number of SIEM events that show the following activity:
Which of the following response actions should the analyst take FIRST?

  1. Disable powershell.exe on all Microsoft Windows endpoints.
  2. Restart Microsoft Windows Defender.
  3. Configure the forward proxy to block 40.90.23.154.
  4. Disable local administrator privileges on the endpoints.

Answer(s): C



A company has hired a third party to develop software as part of its strategy to be quicker to market. The company's policy outlines the following requirements:
-The credentials used to publish production software to the container registry should be stored in a secure location.
-Access should be restricted to the pipeline service account, without the ability for the third-party developer to read the credentials directly.
Which of the following would be the BEST recommendation for storing and monitoring access to these shared credentials?

  1. TPM
  2. Local secure password file
  3. MFA
  4. Key vault

Answer(s): D


Reference:

https://docs.microsoft.com/en-us/windows/security/information-protection/tpm/tpm-fundamentals



A business stores personal client data of individuals residing in the EU in order to process requests for mortgage loan approvals.
Which of the following does the business's IT manager need to consider?

  1. The availability of personal data
  2. The right to personal data erasure
  3. The company's annual revenue
  4. The language of the web application

Answer(s): B


Reference:

https://gdpr.eu/right-to-be-forgotten/#:~:text=Also%20known%20as%20the%20right,to%20delete%20their%20personal%20data.&text=The%
20General%20Data%20Protection%20Regulation,collected%2C%20processed%2C%20and%20erased



Viewing page 9 of 127
Viewing questions 41 - 45 out of 645 questions



Post your Comments and Discuss CompTIA CAS-004 exam dumps with other Community members:

CAS-004 Exam Discussions & Posts

AI Tutor