CompTIA SecurityX

Here you have the best CompTIA CAS-005 practice exam questions

You have 61 total questions to study from
Each page has 5 questions, making a total of 13 pages
You can navigate through the pages using the buttons at the bottom
This questions were last updated on May 24, 2025
This site is not affiliated with or endorsed by CompTIA.

Question 1 of 61

A security architect discovers the following while reviewing code for a company's website: selection = "SELECT Item FROM Catalog WHERE ItemID = " & Request("ItemID")

Which of the following should the security architect recommend?

Client-side processing

Query parameterization

Data normalization

Escape character blocking

URL encoding

Correct Answer: B

Question 2 of 61

A security architect needs to enable a container orchestrator for DevSecOps and SOAR initiatives. The engineer has discovered that several Ansible YAML files used for the automation of configuration management have the following content:

Which of the following should the engineer do to correct the security issues presented within this content?

Update the kubernetes.core.k8s module to kubernetes.core.k8s_service in the main.yml file.

Update the COMPTIA001 hostname to localhost using the hostnamectl command.

Update the state: present module to state: absent in the main.yml file.

Update or remove the ansible.cfg file.

Update the insecure-bind-address from localhost to the COMPTIA001 in the manifests file.

Correct Answer: D

Question 3 of 61

A CRM company leverages a CSP PaaS service to host and publish Its SaaS product. Recently, a large customer requested that all infrastructure components must meet strict regulatory requirements, including configuration management, patch management, and life-cycle management. Which of the following organizations is responsible for ensuring those regulatory requirements are met?

The CRM company

The CRM company's customer

The CSP

The regulatory body

Correct Answer: A

Question 4 of 61

Company A is merging with Company B. Company A is a small, local company. Company B has a large, global presence. The two companies have a lot of duplication in their IT systems, processes, and procedures. On the new Chief Information Officer's (CIO's) first day, a fire breaks out at Company B's main data center. Which of the following actions should the CIO take first?

Determine whether the incident response plan has been tested at both companies, and use it to respond.

Review the incident response plans, and engage the disaster recovery plan while relying on the IT leaders from both companies.

Ensure hot, warm, and mobile disaster recovery sites are available, and give an update to the companies' leadership teams.

Initiate Company A's IT systems processes and procedures, assess the damage, and perform a BIA.

Correct Answer: B

Question 5 of 61

A security analyst is investigating a possible insider threat incident that involves the use of an unauthorized USB from a shared account to exfiltrate data. The event did not create an alert. The analyst has confirmed the USB hardware ID is not on the device allow list, but has not yet confirmed the owner of the USB device. Which of the following actions should the analyst take next?

Classify the incident as a false positive.

Classify the incident as a false negative.

Classify the incident as a true positive.

Classify the incident as a true negative.

Correct Answer: B