Pass CompTIA CASP CAS-004 exam [Sep 07, 2025] Updated 620 Questions [Q252-Q273]

NO.252 A city government’s IT director was notified by the city council that the following cybersecurity requirements must be met to be awarded a large federal grant:
– Logs for all critical devices must be retained for 365 days to enable monitoring and threat hunting.
– All privileged user access must be tightly controlled and tracked to
mitigate compromised accounts.
– Ransomware threats and zero-day vulnerabilities must be quickly
identified.
Which of the following technologies would BEST satisfy these requirements? (Choose three.)

NO.253 Law enforcement officials informed an organization that an investigation has begun. Which of the following is the FIRST step the organization should take?

NO.254 A company wants to configure its wireless network to require username and password authentication. Which of the following should the system administrator implement?

NO.255 A security analyst is reviewing network connectivity on a Linux workstation and examining the active TCP connections using the command line.
Which of the following commands would be the BEST to run to view only active Internet connections?

NO.256 A security analyst is reviewing the following pseudo-output snippet after running the command less /tmp/file.tmp.

The information above was obtained from a public-facing website and used to identify military assets. Which of the following should be implemented to reduce the risk of a similar compromise?

NO.257 An organization is implementing a new identity and access management architecture with the following objectives:
Supporting MFA against on-premises infrastructure
Improving the user experience by integrating with SaaS applications
Applying risk-based policies based on location
Performing just-in-time provisioning
Which of the following authentication protocols should the organization implement to support these requirements?

NO.258 An organization is implementing a new identity and access management architecture with the following objectives:
Supporting MFA against on-premises infrastructure
Improving the user experience by integrating with SaaS applications
Applying risk-based policies based on location
Performing just-in-time provisioning
Which of the following authentication protocols should the organization implement to support these requirements?

NO.259 A company wants to implement a new website that will be accessible via browsers with no mobile applications available. The new website will allow customers to submit sensitive medical information securely and receive online medical advice. The company already has multiple other websites where it provides various public health data and information. The new website must implement the following:
– The highest form of web identity validation
– Encryption of all web transactions
– The strongest encryption in-transit
– Logical separation based on data sensitivity
Other things that should be considered include:
– The company operates multiple other websites that use encryption.
– The company wants to minimize total expenditure.
– The company wants to minimize complexity.
Which of the following should the company implement on its new website? (Choose two.)

NO.260 A security administrator has been tasked with hardening a domain controller against lateral movement attacks. Below is an output of running services:

Which of the following configuration changes must be made to complete this task?

NO.261 A SIEM generated an alert after a third-party database administrator, who had recently been granted temporary access to the repository, accessed business-sensitive content in the database. The SIEM had generated similar alerts before this incident. Which of the following best explains the cause of the alert?

NO.262 An organization needs to classify its systems and data in accordance with external requirements. Which of the following roles is best qualified to perform this task?

NO.263 An organization based in the United States is planning to expand its operations into the European market later in the year Legal counsel is exploring the additional requirements that must be established as a result of the expansion. The BEST course of action would be to

NO.264 A review of the past year’s attack patterns shows that attackers stopped reconnaissance after finding a susceptible system to compromise. The company would like to find a way to use this information to protect the environment while still gaining valuable attack information.
Which of the following would be BEST for the company to implement?

NO.265 An organization’s finance system was recently attacked. A forensic analyst is reviewing the contents Of the compromised files for credit card data.
Which of the following commands should the analyst run to BEST determine whether financial data was lost?

NO.266 A junior security researcher has identified a buffer overflow vulnerability leading to remote code execution in a former employer’s software. The security researcher asks for the manager’s advice on the vulnerability submission process. Which of the following is the best advice the current manager can provide the security researcher?

NO.267 A financial institution would like to store its customer data in a cloud but still allow the data to be accessed and manipulated while encrypted. Doing so would prevent the cloud service provider from being able to decipher the data due to its sensitivity. The financial institution is not concerned about computational overheads and slow speeds. Which of the following cryptographic techniques would BEST meet the requirement?

NO.268 A company is acquiring a competitor, and the security team is performing due diligence activities on the competitor prior to the acquisition. The team found a recent compliance audit of the competitor’s environment that shows a mature security infrastructure, but it lacks a cohesive policy and process framework. Based on the audit findings, the security team determines the competitor’s existing security capabilities are sufficient, but they will need to incorporate additional security policies. Which of the following risk management strategies is the security team recommending?

NO.269 A pharmaceutical company uses a cloud provider to host thousands of independent resources in object storage. The company needs a practical and effective means of discovering data, monitoring changes, and identifying suspicious activity. Which of the following would best meet these requirements?

NO.270 A software developer needs to add an authentication method to a web application. The following requirements must be met:
* The web application needs to use well-supported standards.
* The initial login to the web application should rely on an outside, trusted third party.
* The login needs to be maintained for up to six months.
Which of the following would best support these requirements? (Select two).

NO.271 A significant weather event caused all systems to fail over to the disaster recovery site successfully. However, successful data replication has not occurred in the last six months, which has resulted in the service being unavailable. V*Vh1ch of the following would BEST prevent this scenario from happening again?

NO.272 An organization is looking to establish more robust security measures by implementing PKI.
Which of the following should the security analyst implement when considering mutual authentication?

NO.273 Which of the following indicates when a company might not be viable after a disaster?