Free Access CompTIA.CAS-005.v2026-06-29.q284 Practice Test (Page 42)

Question 201

A building camera is remotely accessed and disabled from the remote console application during off-hours. A security analyst reviews the following logs:

A security architect is onboarding a new EDR agent on servers that traditionally do not have internet access.
In order for the agent to receive updates and report back to the management console, some changes must be made. Which of the following should the architect do to best accomplish this requirement? (Select two).

A.Create a firewall rule to only allow traffic from the subnet to the internet via a proxy.

B.Configure a proxy policy that blocks all traffic on port 443.

C.Configure a proxy policy that allows only fully qualified domain names needed to communicate to a portal.

D.Create a firewall rule to only allow traffic from the subnet to the internet via port 443.

E.Create a firewall rule to only allow traffic from the subnet to the internet to fully qualified names that are not identified as malicious by the firewall vendor.

F.Configure a proxy policy that blocks only lists of known-bad, fully qualified domain names.

Question 202

A company discovers intellectual property data on commonly known collaboration web applications that allow the use of slide templates. The systems administrator is reviewing the configurations of each tool to determine how to prevent this issue. The following security solutions are deployed:
- CASB
- SASE
- WAF
- EDR
- Firewall
- IDS
- SIEM
- DLP endpoints
Which of the following should the administrator do to address the issue?

A.Enable blocking for all WAF policies.

B.Enforce a policy to block unauthorized web applications within CASB.

C.Create an alert within the SIEM for outgoing network traffic to the suspected website.

D.Configure DLP endpoints to block sensitive data to the mass media.

Question 203

A pharmaceutical company uses a cloud provider to host thousands of independent resources in object storage. The company needs a practical and effective means of discovering data, monitoring changes, and identifying suspicious activity. Which of the following would best meet these requirements?

A.A machine-learning-based data security service

B.A file integrity monitoring service

C.A cloud configuration assessment and compliance service

D.An automated data classification system

Question 204

A company receives reports about misconfigurations and vulnerabilities in a third-party hardware device that is part of its released products. Which of the following solutions is the best way for the company to identify possible issues at an earlier stage?

A.Implementing a monitoring process for the integration between the application and the vendor appliance

B.Performing vulnerability tests on each device delivered by the providers

C.Implementing a proper supply chain risk management program

D.Performing regular red-team exercises on the vendor production line

Question 205

Acompany must build and deploy security standards for all servers in its on-premises and cloud environments based on hardening guidelines. Which of the following solutions most likely meets the requirements?

A.Develop a security baseline to integrate with the vulnerability scanning platform to alert about any server not aligned with the new security standards.

B.Create baseline images for each OS in use, following security standards, and integrate the images into the patching and deployment solution.

C.Build all new images from scratch, installing only needed applications and modules in accordance with the new security standards.

D.Run a script during server deployment to remove all the unnecessary applications as part of provisioning.

Other Version: 4465CompTIA.CAS-005.v2025-02-20.q115; 1045CompTIA.CAS-005.v2024-11-23.q40

Latest Upload: 106Juniper.JN0-683.v2026-10-07.q69; 105Salesforce.AP-201.v2026-10-07.q56; 186ISQI.CTAL-TAE.v2026-10-06.q38; 146Oracle.1Z0-1079-26.v2026-10-06.q19; 367PRINCE2.PRINCE2-Foundation.v2026-10-05.q391; 187Splunk.SPLK-5002.v2026-10-05.q114; 196Salesforce.Marketing-Cloud-Account-Engagement-Specialist.v2026-10-05.q121; 253Salesforce.Certified-Business-Analyst.v2026-10-05.q199; 266ServiceNow.CAD.v2026-10-05.q256; 162WGU.Introduction-to-IT.v2026-10-03.q47

Question 201

Question 202

Question 203

Question 204

Question 205

Download PDF File