Try Free CompTIA CAS-004 Updated Questions & Answers

Question 1

In support of disaster recovery objectives, a third party agreed to provide 99.999% uptime. Recently, a hardware failure impacted a firewall without service degradation. Which of the following resiliency concepts was most likely in place?

AClustering

BHigh availability

CRedundancy

DReplication

Correct answer: B

High availability ensures continuous operation despite hardware failures by leveraging redundant components like clustered firewalls or failover systems. This aligns with CASP+ objective 3.1, which focuses on implementing availability and redundancy mechanisms in disaster recovery planning.

________________________________________

Question 2

A company's product site recently had failed API calls, resulting in customers being unable to check out and purchase products. This type of failure could lead to the loss of customers and damage to the company's reputation in the market.

Which of the following should the company implement to address the risk of system unavailability?

AUser and entity behavior analytics

BRedundant reporting systems

CA self-healing system

DApplication controls

Correct answer: D

Question 3

A security administrator is assessing the risk associated with using a software tool built by a small start-up company to provide product pricing updates. Which of the following risks would most likely be a factor?

APrivacy concerns

BVendor viability

CRegulatory compliance

DGeographic location

Correct answer: B

Comprehensive and Detailed Step by Step

A startup may have limited resources, which could impact the security, reliability, and availability of its products.

Privacy concernsandregulatory complianceare possible risks but less relevant unless the tool deals directly with sensitive data or operates in a regulated industry.

Geographic locationis unlikely to directly affect the risk unless there are jurisdictional data transfer laws involved.

CompTIA CASP+ Exam Objective 1.2: Analyze the security risks and impacts of integrating diverse third-party products.

CASP+ Study Guide, 5th Edition, Chapter 2, Third-Party Risk Assessment.

Question 4

Which of the following BEST sets expectation between the security team and business units within an organization?

ARisk assessment

BMemorandum of understanding

CBusiness impact analysis

DBusiness partnership agreement

EServices level agreement

Correct answer: E

A service level agreement (SLA) is the best option to set expectations between the security team and business units within an organization. An SLA is a document that defines the scope, quality, roles, responsibilities, and metrics of a service provided by one party to another. An SLA can help align the security team's objectives and activities with the business units' needs andexpectations, as well as establish accountability and communication channels. Verified Reference: https://www.comptia.org/training/books/casp-cas-004-study-guide , https://searchitchannel.techtarget.com/definition/service-level-agreement

Question 5

A SOC analyst received an alert about a potential compromise and is reviewing the following SIEM logs:

Which of the following is the most appropriate action for the SOC analyst to recommend?

ADisabling account JDoe to prevent further lateral movement

BIsolating laptop314 from the network

CAlerting JDoe about the potential account compromise

DCreating HIPS and NIPS rules to prevent logins

Correct answer: B

The SIEM logs indicate suspicious behavior that could be a sign of a compromise, such as the launching of cmd.exe after Outlook.exe, which is atypical user behavior and could indicate that a machine has been compromised to perform lateral movement within the network. Isolating laptop314 from the network would contain the threat and prevent any potential spread to other systems while further investigation takes place.

CAS-004 Exam Dumps and Practice Questions

Most Recent CompTIA CAS-004 Exam Dumps

Actual CompTIA CAS-004 Exam Questions

Unlock all CompTIA CAS-004 questions