Free CAS-005 Exam Braindumps
CompTIA SecurityX Questions 86–90 (page: 19)

Updated On: 10-Feb-2026

Users are experiencing a variety of issues when trying to access corporate resources. Examples include:


- Connectivity issues between local computers and file servers between branch offices
- Inability to download corporate applications on mobile endpoints while working remotely
- Certificate errors when accessing internal web applications

Which of the following actions are the most relevant when troubleshooting the reported issues? (Choose two.)

  1. Review VPN throughput.
  2. Check IDS rules.
  3. Restore static content on the CDN.
  4. Enable secure authentication using NAC.
  5. Implement advanced WAF rules.
  6. Validate MDM asset compliance.

Answer(s): A,F

Explanation:

Review VPN throughput helps identify remote access issues, such as slow or failed application downloads.
Validate MDM asset compliance ensures mobile devices meet security requirements, which can affect access to apps and certificates.



A network engineer recorded the following test results:



After a new network security appliance was deployed, the results of the network test are as follows:



Which of the following network infrastructure components most likely produced these results?

  1. IPS
  2. CDN
  3. VPN
  4. IDS

Answer(s): A

Explanation:

The drastic latency increase and the dropped connection indicate packet inspection and filtering behavior.
An Intrusion Prevention System (IPS) actively inspects, filters, and can block traffic based on threat signatures, which explains the drop and increased latency after deployment.



A developer needs to improve the cryptographic strength of a password-storage component in a web application without completely replacing the crypto-module.
Which of the following is the most appropriate technique?

  1. Key splitting
  2. Key escrow
  3. Key rotation
  4. Key encryption
  5. Key stretching

Answer(s): E

Explanation:

Key stretching enhances the security of stored passwords by applying computationally intensive algorithms (e.g., bcrypt, PBKDF2) to make brute-force attacks more difficult, without replacing the underlying crypto- module.



A company wants to implement hardware security key authentication for accessing sensitive information systems. The goal is to prevent unauthorized users from gaining access with a stolen password.
Which of the following models should the company implement to best solve this issue?

  1. Rule-based
  2. Time-based
  3. Role-based
  4. Context-based

Answer(s): D

Explanation:

Context-based access control considers additional factors like device type, location, or the presence of a hardware security key to allow access. It is best suited to prevent access even if passwords are stolen by requiring context-aware verification.



Which of the following is the main reason quantum computing advancements are leading companies and countries to deploy new encryption algorithms?

  1. Encryption systems based on large prime numbers will be vulnerable to exploitation.
  2. Zero Trust security architectures will require homomorphic encryption.
  3. Perfect forward secrecy will prevent deployment of advanced firewall monitoring techniques.
  4. Quantum computers will enable malicious actors to capture IP traffic in real time.

Answer(s): A

Explanation:

Quantum computing threatens traditional encryption methods, especially those based on large prime number factorization (e.g., RSA), because quantum algorithms like Shor's algorithm can break them efficiently. This drives the need for post-quantum cryptography.



Viewing page 19 of 72
Viewing questions 91 - 95 out of 482 questions


Post your Comments and Discuss CompTIA CAS-005 exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!