Official Bank 0/345

CompTIA SecurityX Certification (CAS-005) - CompTIA Exam Questions

Last updated on June 20, 2026

97% Exam Compliance
345 Total Questions
1
Question
A security analyst discovered requests associated with IP addresses known for born legitimate 3nd bot-related traffic. Which ofthe following should the analyst use to determine whether the requests are malicious?
Options
A HTML encoding field
B Web application headers
C Byte length of the request
D User-agent string
Discussion (0 comments)

to join the discussion

Community Discussion

No discussions yet. Be the first to ask!

2
Question
Which of the following best describes the challenges associated with widespread adoption of homomorphic encryption techniques?
Options
A insufficient coprocessor support
B Quantum computers not yetcapable
C No use cases to drive adoption
D Incomplete mathematical primitives
Discussion (0 comments)

to join the discussion

Community Discussion

No discussions yet. Be the first to ask!

3
Question
An organization recently experienced a security incident due to an exterior door in a busy area getting stuck open. The organization launches a security campaign focused on the motto, "See Something, Say Something." Which of the following best describes what the organization wants to educate employees about?
Options
A Tailgating
B Situational awareness
C Phishing
D Social engineering
Discussion (0 comments)

to join the discussion

Community Discussion

No discussions yet. Be the first to ask!

4
Question
A pharmaceutical lab hired a consultant to identify potential risks associated with Building 2, a new facility that is under construction. The consultant received the IT project plan, which includes the following VLAN design:

Exhibit

Which of the following TTPs should the consultant recommend be addressed first?
Options
A Lateral movement
B Zone traversal
C Unauthorized execution
D Privilege escalation
Discussion (0 comments)

to join the discussion

Community Discussion

No discussions yet. Be the first to ask!

5
Question
A local government that is investigating a data exfiltration claim was asked to review the fingerprint of the malicious user's actions. An investigator took a forensic image of the VM and downloaded the image to a secured USB drive to share with the government. Which of the following should be taken into consideration during the process of releasing the drive to the government?
Options
A Order of volatility
B Key exchange
C Chain of custody
D Legal issues
E Encryption in transit
Discussion (0 comments)

to join the discussion

Community Discussion

No discussions yet. Be the first to ask!

Finish Practice?

Are you sure you want to finish? This will end your practice session.