Free CompTIA Advanced Security Practitioner (CASP+) Questions and Answers

Question 1

What among the following DOES NOT constitute an open-source intelligence (OSINT) source?

Accepted Answer

Ping scan

Answer

Whois

Answer

Social Media

Answer

DNS record

Question 2

A cloud storage company is Acme Cloud. A threat actor recently gained access to and successfully decrypted data from one of Acme Cloud's servers. However, the insufficient nature of the data prevented the threat actor from using it. Prior to the breach, Acme Cloud divided and re-encrypted the customer data among various servers.

What phrase best defines the method Acme Cloud uses to divide the data in order to lessen the chance of data leakage?

Accepted Answer

Bit splitting

Answer

Application wrapping

Answer

Stream ciphering

Answer

Key escrow

Question 3

As a security engineer at Acme Inc., you proactively look for and uncover security threats and process problems in your production environment by using a variety of automated tools, parsing logs, analyzing configurations, and carrying out manual testing.

Which phrase does BEST capture these activities?

Accepted Answer

Threat hunting

Answer

Malware scanning

Answer

Port scanning

Answer

Threat emulation

Question 4

What kinds of services are utilized to supply network resources like users, servers, printers, and other organizational information?

Accepted Answer

Directory

Answer

STARTTLS

Answer

Peering

Answer

Federation

Question 5

Which of the following is an improvement on Electronic Code Book (ECB) block cipher mode that connects each block together before being applied to the following block?

Accepted Answer

CBC

Answer

CFB

Answer

AES

Answer

CTR

Question 6

Which hierarchical type of the following, which uses certificate authorities (CAs), registration authorities (RAs), and central directory/distribution management to build their trust model, is used by MOST organizations when implementing PKI?

Accepted Answer

Chain of trust

Answer

Symmetric encryption

Answer

Control mode

Answer

PGP

Question 7

Which method among the following modifies routing tables to filter out undesired traffic before it reaches a destination network?

Accepted Answer

RTBH filtering

Answer

Multihoming

Answer

Port security

Answer

Reverse proxy