Important CompTIA CAS-005 Exam Questions

Answer: B

Explanation:

The best answer is B. Extending an SD-WAN with specific policies because the question asks for a way to create a unified network while not weakening the acquiring company's security posture. In CompTIA SecurityX CAS-005, SD-WAN is explicitly part of Security Architecture, under ''Deperimeterization: SASE, SD-WAN, and software-defined networking.'' The same official objective set also lists ''Network architecture: segmentation, microsegmentation, VPN...'' and ''Security boundaries... secure zones.'' Those objective areas support a policy-based integration approach in which the plant can be connected while maintaining segmentation, security zones, and centralized enforcement.

This is especially important because the manufacturing plant is old and has not followed an equipment refresh life cycle. That strongly suggests there may be legacy systems, operational technology, and devices that cannot be rapidly modernized or patched. A policy-driven SD-WAN design is more effective than simply connecting the site because it allows the acquiring company to preserve trust boundaries and apply differentiated controls to plant traffic. That aligns directly with CompTIA's official SecurityX emphasis on segmentation, secure zones, and deperimeterization technologies.

Why the other options are not the best choice:

A is not best because a WAF protects web applications, not an entire acquired manufacturing environment, and the scenario does not say the core issue is a web application stack. Also, ''patching the legacy IT equipment'' is unrealistic in a plant with decades-old infrastructure and does not answer the requirement for a unified but controlled network design. C is weaker because a site-to-site VPN provides connectivity and SIEM provides visibility, but neither by itself gives the same policy-based segmentation and architectural control as SD-WAN. D is too narrow because a proxy server does not solve full-site network integration or architecture-wide posture management.

CompTIA SecurityX (CAS-005) official certification page and exam objectives summary, especially Security Architecture domains covering SD-WAN, segmentation, VPN, and secure zones.

===========

Answer: B

Explanation:

The best answer is B. Privilege escalation. The most critical issue is the JWT header value 'alg': 'None', which indicates an unsigned token. If a workload accepts such a token, an attacker may be able to alter claims such as subject, role, scope, or account identity and then present the modified token as valid. Because the sample already references a service account in the token claims, the most concerning IAM consequence is unauthorized elevation of access through token forgery or manipulation. CompTIA's SecurityX objectives include IAM and secure implementation of authentication and authorization controls; a broken token-validation scheme directly undermines authorization integrity.

Why the other options are not best:

A . Lateral movement could be a downstream result, but the immediate and primary risk in the token itself is unauthorized privilege gain. C. Credential stuffing involves reuse of stolen usernames and passwords, which is unrelated to this JWT issue. D. RCE from deserialization is a different application vulnerability class and is not the main concern shown by the JWT header and claims. The most direct risk here is privilege escalation via forged or altered tokens.

CompTIA SecurityX official exam objectives summary, including IAM-related secure control implementation.

===========

Answer: B

Explanation:

The logs indicate multiple failed login attempts for user10, who may have been part of the staff reduction 60 days prior. If user10's account was removed, and their home directory deleted, any applications or services relying on files or configurations within that directory would fail. This scenario is common when service accounts are not properly identified and preserved during staff reductions.

Ensuring that service accounts are documented and maintained separately from user accounts is essential to prevent unintended disruptions to applications and services.

Answer: D

Explanation:

A crisis management plan defines coordinated communication and response strategies for high-profile incidents that may harm an organization's public reputation and shareholder confidence. CAS-005 GRC content includes crisis communication planning for regulatory compliance and public relations in the wake of breaches.

A Data Subject Access Request (A) addresses individual data rights, not overall crisis handling.

Business Impact Analysis (B) helps assess potential operational and financial impacts but does not manage public perception during an incident.

Supply chain management (C) is preventative for vendor risks, not responsive to current crises.

Answer: A

Explanation:

Programmable Logic Controllers (PLCs) in Operational Technology (OT) environments commonly useLadder Logic, a graphical programming language resembling electrical relay logic diagrams. It's the most relevant for PLCs due to its widespread use in industrial automation.

Option A:Ladder Logic is the standard for PLC programming, making it the best choice.

Option B:Rust is modern and secure but not typically used for PLCs.

Option C:C is used in some embedded systems but less common for PLCs.

Option D:Python is versatile but not native to PLC programming.

Option E:Java is rare in PLC contexts.