CASP+ (CASP+) CAS-004 2

Question 1

A security architect is designing a zero-trust network for a financial institution. Which control BEST enforces the 'never trust, always verify' principle for internal east-west traffic?

Accepted Answer

Microsegmentation with continuous identity verification per session

Answer

Microsegmentation combined with continuous per-session identity verification directly enforces zero-trust by treating every lateral connection as untrusted.

Question 2

During a threat hunt, an analyst discovers beaconing traffic to an external IP at regular 60-second intervals using HTTPS. The process responsible is svchost.exe. What is the MOST likely threat?

Accepted Answer

Command-and-control communication from malware using process hollowing

Answer

Regular beaconing from svchost.exe over HTTPS is a hallmark of process hollowing where malware injects into a legitimate process to establish C2 communication.

Question 3

A company must comply with both GDPR and CCPA. Their cloud provider stores data in the US and EU. Which data governance control addresses both regulations' residency and subject rights requirements?

Accepted Answer

Implement data classification with geo-tagged metadata and automated deletion workflows

Answer

Data classification with geo-tagged metadata enables both residency enforcement and automated workflows for subject rights like deletion under GDPR/CCPA.

Question 4

An organization's PKI root CA must be taken offline after initial setup. What is the PRIMARY security reason for this practice?

Accepted Answer

To prevent the root CA private key from being compromised via network-based attacks

Answer

Keeping the root CA offline eliminates its attack surface, protecting the root private key that underpins the entire PKI trust chain.

Question 5

A penetration tester successfully performs a SQL injection attack but the application returns only true/false responses with no error messages. Which SQL injection technique applies?

Accepted Answer

Blind boolean-based SQL injection

Answer

Blind boolean-based SQL injection infers database information from the application's true/false behavioral responses when no data is directly returned.

CASP+ - CompTIA Advanced Security Practitioner Practice Test

CASP+ - CompTIA Advanced Security Practitioner Practice Test

CASP+ (CASP+) CAS-004 2