[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"detail-sidebar-cat-0-en-105":3,"doc-seo-310508-105":59,"doc-detail-310508-en":130},{"code":4,"msg":5,"data":6},0,"success",[7,13,18,23,28,33,38,43,48,51,55],{"id":8,"doc_module":4,"doc_module_name":9,"category_name":10,"show_sort_weight":11,"slug":12},1,"Document","Story & Novel",90,"story-novel",{"id":14,"doc_module":4,"doc_module_name":9,"category_name":15,"show_sort_weight":16,"slug":17},2,"Literature",80,"literature",{"id":19,"doc_module":4,"doc_module_name":9,"category_name":20,"show_sort_weight":21,"slug":22},4,"Exam",70,"exam",{"id":24,"doc_module":4,"doc_module_name":9,"category_name":25,"show_sort_weight":26,"slug":27},5,"Comic",60,"comic",{"id":29,"doc_module":4,"doc_module_name":9,"category_name":30,"show_sort_weight":31,"slug":32},6,"Technology",50,"technology",{"id":34,"doc_module":4,"doc_module_name":9,"category_name":35,"show_sort_weight":36,"slug":37},7,"Healthcare",40,"healthcare",{"id":39,"doc_module":4,"doc_module_name":9,"category_name":40,"show_sort_weight":41,"slug":42},8,"Research & Report",30,"research-report",{"id":44,"doc_module":4,"doc_module_name":9,"category_name":45,"show_sort_weight":46,"slug":47},9,"Religion & Spirituality",20,"religion-spirituality",{"id":46,"doc_module":4,"doc_module_name":9,"category_name":49,"show_sort_weight":46,"slug":50},"World Cup","world-cup",{"id":52,"doc_module":4,"doc_module_name":9,"category_name":53,"show_sort_weight":52,"slug":54},10,"Lifestyle","lifestyle",{"id":56,"doc_module":4,"doc_module_name":9,"category_name":57,"show_sort_weight":24,"slug":58},19,"General","general",{"code":4,"msg":60,"data":61},"ok",{"site_id":62,"language":63,"slug":64,"title":65,"keywords":66,"description":67,"schema_data":68,"social_meta":123,"head_meta":125,"extra_data":127,"updated_unix":129},105,"en","free-questions-for-cas-004-310508","Free Questions for CAS-004","","Free practice questions for CompTIA CAS-004 focused on applying network security design requirements. The scenarios ask the analyst to map given resources into the correct network zones based on segmentation, screened subnets for externally available assets, and a shared services zone for internal servers that must not include workstations. The document includes multiple-choice prompts, example access outcomes, and simulated MFA device-access logs requiring identification of violated policies and explaining related telemetry events.",{"@graph":69,"@context":122},[70,84,105],{"@type":71,"itemListElement":72},"BreadcrumbList",[73,77,79,82],{"item":74,"name":75,"@type":76,"position":8},"https://docshare.wps.com","Home","ListItem",{"item":78,"name":9,"@type":76,"position":14},"https://docshare.wps.com/document/",{"item":80,"name":20,"@type":76,"position":81},"https://docshare.wps.com/document/exam/",3,{"item":83,"name":65,"@type":76,"position":19},"https://docshare.wps.com/document/free-questions-for-cas-004-310508/310508/",{"url":83,"name":65,"@type":85,"image":86,"author":91,"headline":65,"publisher":94,"fileFormat":97,"inLanguage":63,"description":67,"dateModified":98,"datePublished":99,"encodingFormat":97,"isAccessibleForFree":100,"interactionStatistic":101},"DigitalDocument",{"url":87,"@type":88,"width":89,"height":90},"https://docshare.wps.com/thumbnails/free-questions-for-cas-004-310508/310508.png","ImageObject",300,407,{"name":92,"@type":93},"Mia  ","Person",{"url":74,"name":95,"@type":96},"DocShare","Organization","application/pdf","2026-11-04","2026-09-20",true,{"@type":102,"interactionType":103,"userInteractionCount":52},"InteractionCounter",{"@type":104},"ViewAction",{"@type":106,"mainEntity":107},"FAQPage",[108,114,118],{"name":109,"@type":110,"acceptedAnswer":111},"What network security requirements are used in Question 1?","Question",{"text":112,"@type":113},"Hosts must be segmented into security domains, externally available assets must be placed in a screened subnet, and a shared services zone must exist for internal servers without including workstations.","Answer",{"name":115,"@type":110,"acceptedAnswer":116},"How should resources be placed in Question 1?",{"text":117,"@type":113},"Place workstations in the LAN, internal servers (such as file and authentication servers, plus the database server) in the shared services zone, and public-facing services in the screened subnet/DMZ as indicated by the explained mapping.",{"name":119,"@type":110,"acceptedAnswer":120},"What evidence is used in Question 2 to determine MFA policy violations?",{"text":121,"@type":113},"The question instructs examining the device health policy for the MFA solution, the MFA usage logs, and device telemetry, then selecting the violated policy/policies and the telemetry logs that explain those violations.","https://schema.org",{"og:url":83,"og:type":124,"og:title":65,"og:site_name":95,"og:description":67},"article",{"robots":126,"canonical":83},"index,follow",{"doc_id":128,"site_id":62},310508,1790825381,{"code":4,"msg":5,"data":131},{"doc_id":128,"user_id":132,"nickname":92,"user_avatar":133,"doc_module":4,"category_id":19,"category_name":20,"doc_title":65,"doc_description":67,"doc_content":134,"file_id":135,"file_url":136,"file_type":137,"file_size":138,"view_count":52,"is_deleted":4,"is_public":8,"is_downloadable":8,"audit_status":8,"page_count":139,"language":140,"language_code":63,"site_id":62,"html_lang":63,"table_of_contents":141,"faqs":142,"seo_title":143,"seo_description":67,"update_tm":144,"read_time":145,"preview_page_count":4},687207024478,"https://ap-avatar.wpscdn.com/davatar_a8503ba1806abce46bf441b54a3ca4cd","# Free Questions for CAS-004\n\nShared by Gould on 13-05-2025  \nFor More Free Questions and Preparation ResourcesCheck the Links on Last Page  \nQuestion 1                      \nQuestion Type:MultipleChoice                           \n## SIMULATION\n\nYou are an information security analyst tasked to provide feedback and remediationguidance to an organization that is working to comply with a prescriptive framework.  \nThe framework includes the following controls related to network design:  \n.Network hosts must be segmented into security domains.  \n.A screened subnet must be used for all externally available assets.  \n.A shared services zone must be present for internal servers and should not containworkstations.  \n## INSTRUCTIONS\n\nBased on the stated requirements,place each resource in the appropriate network location.Allresources must be used,and all network zones will be filled.  \n| File server   |\n| --- |\n| Authentication server   |\n| Email proxy   |\n| VPN concentrator   |\n| Database server   |\n| Web server   |\n| Workstation   |\n| Workstation   |\n| Workstation   |\n| Workstation   |\n\nOptions:                                \nA-See the solution in explanation part  \n## Answer:\n\nA  \n## Explanation:\n\nLAN:WorkstationWorkstation  \nShared Services Zone:File server  \nAuthentication serverDatabase serverScreened Subnet (DMZ):Web server  \nEmail proxy  \nVPN concentrator  \nLet's Map Them by Zone  \nLAN(Top Right,2 boxes)--Workstations only  \nWorkstation  \nWorkstation  \nShared Services Zone(Middle Row)--Internal-use servers  \nFile server  \nAuthentication serverDatabase server  \nScreened Subnet/DMZ(Bottom Row)--Public-facing services  \nWeb server  \nEmail proxy  \nVPN concentrator  \nRemaining Workstations:  \nGo in theLAN(you'll have two more slots)  \nFinal Assignment:  \nLAN(Top Right)  \nWorkstation  \nWorkstation  \nShared Services Zone(Middle Row)  \nFile server  \nAuthentication server  \nShared Services Zone(Middle Row)  \nDatabase server  \nWorkstationThis is not allowed!(Needs to go elsewhere)  \nSo we must placeall 4 workstationsinto theLAN,and all 3 internal servers into themiddlerow.  \nCorrected Mapping:  \nLAN(Top Right-2 slots)  \nWorkstation  \nWorkstation  \nMiddle Row(Shared Services Zone-2 boxes)  \nFile server  \nAuthentication server  \nBottom Row(Shared Services or DMZ-3 boxes)  \nDatabase server  \nWeb server  \nEmail proxy /VPN concentrator  \n## Question 2                    \n\nQuestion Type:MultipleChoice                              \nSIMULATION  \nYou have received a report that some users are unable to use their personal devices to  \nauthenticate to a protected corporate website.The users have stated that no changes have beenmade on their personal devices since the last time they were able to authenticate successfully.  \n## INSTRUCTIONS\n\nExamine the device health policy for the MFA solution,the MFA usage logs,and the devicetelemetry.Using that information:  \n.Select the policy/policies that were violated.  \n.Select the telemetry log(s)that  \nexplain(s)the policy violations.  \nTime-out  \nPermit  \nDeny  \n\n| Time   | Subject   | Event   | Access object   | Result   |\n| --- | --- | --- | --- | --- |\n| 202104102220 UTC    | Ann   | Push   | Accounting_database   | Permit -success   |\n| 202104110004 UTC    | Joe   | Push   | Accounting_database   | Permit -success   |\n| 202104110110 UTC   | Jacob   | Push   | Sales_application   | Deny -context   |\n| 202104110202 UTC    | Bob   | Push   | IT_intelligence_service   | Time-out   |\n| 202104110229 UTC   | Mary   | Push   | Sales_application   | Permit -success   |\n| 202104110355 UTC    | Jane   | Push   | Accounting_database   | Deny -context   |\n| 202104110419 UTC    | Jenny   | Push   | Sales_application   | Time-out   |\n| 202104110520 UTC   | William   | Push   | IT intelligence service   | Permit -success   |\n\n## Inspection proxy logs\n\n[date-time-group 20214102220Z]GET /request-pushUser-Agent:mfaApp(i0S 14.4.2;)Applewebkit/537.36(KHTML,like Gecko)Chrome/46.0.2490.86mfaApp.comptia.org/callback?state=9f","cbCaie84AjiBr2V2","https://ap.wps.com/l/cbCaie84AjiBr2V2","pdf",2018137,23,"English","# Question 1\n## Instructions\n## Resources Mapping\n## Explanation\n# Question 2\n## Instructions\n## Device and MFA Access Logs\n## Inspection Proxy Logs","[{\"question\":\"What network security requirements are used in Question 1?\",\"answer\":\"Hosts must be segmented into security domains, externally available assets must be placed in a screened subnet, and a shared services zone must exist for internal servers without including workstations.\"},{\"question\":\"How should resources be placed in Question 1?\",\"answer\":\"Place workstations in the LAN, internal servers (such as file and authentication servers, plus the database server) in the shared services zone, and public-facing services in the screened subnet/DMZ as indicated by the explained mapping.\"},{\"question\":\"What evidence is used in Question 2 to determine MFA policy violations?\",\"answer\":\"The question instructs examining the device health policy for the MFA solution, the MFA usage logs, and device telemetry, then selecting the violated policy/policies and the telemetry logs that explain those violations.\"}]","Free Questions for CAS-004 | PDF",1789883035,58]