[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"detail-sidebar-cat-0-en-105":3,"doc-seo-310426-105":59,"doc-detail-310426-en":130},{"code":4,"msg":5,"data":6},0,"success",[7,13,18,23,28,33,38,43,48,51,55],{"id":8,"doc_module":4,"doc_module_name":9,"category_name":10,"show_sort_weight":11,"slug":12},1,"Document","Story & Novel",90,"story-novel",{"id":14,"doc_module":4,"doc_module_name":9,"category_name":15,"show_sort_weight":16,"slug":17},2,"Literature",80,"literature",{"id":19,"doc_module":4,"doc_module_name":9,"category_name":20,"show_sort_weight":21,"slug":22},4,"Exam",70,"exam",{"id":24,"doc_module":4,"doc_module_name":9,"category_name":25,"show_sort_weight":26,"slug":27},5,"Comic",60,"comic",{"id":29,"doc_module":4,"doc_module_name":9,"category_name":30,"show_sort_weight":31,"slug":32},6,"Technology",50,"technology",{"id":34,"doc_module":4,"doc_module_name":9,"category_name":35,"show_sort_weight":36,"slug":37},7,"Healthcare",40,"healthcare",{"id":39,"doc_module":4,"doc_module_name":9,"category_name":40,"show_sort_weight":41,"slug":42},8,"Research & Report",30,"research-report",{"id":44,"doc_module":4,"doc_module_name":9,"category_name":45,"show_sort_weight":46,"slug":47},9,"Religion & Spirituality",20,"religion-spirituality",{"id":46,"doc_module":4,"doc_module_name":9,"category_name":49,"show_sort_weight":46,"slug":50},"World Cup","world-cup",{"id":52,"doc_module":4,"doc_module_name":9,"category_name":53,"show_sort_weight":52,"slug":54},10,"Lifestyle","lifestyle",{"id":56,"doc_module":4,"doc_module_name":9,"category_name":57,"show_sort_weight":24,"slug":58},19,"General","general",{"code":4,"msg":60,"data":61},"ok",{"site_id":62,"language":63,"slug":64,"title":65,"keywords":66,"description":67,"schema_data":68,"social_meta":123,"head_meta":125,"extra_data":127,"updated_unix":129},105,"en","free-questions-for-cas-005-multiple-choice-security-practice","Free Questions for CAS-005 - Multiple Choice Security Practice","","Free practice questions for CAS-005 covering scenario-based multiple-choice security topics, including prioritizing patching for internet-facing hosts using CVSS, exploit evidence, and exposure context. Includes an encryption cipher selection scenario for a social media company, focusing on memory and CPU efficiency and compatibility with TLS 1.3 for broadcasting. Provides structured options with answers and detailed explanations tied to common security risk concepts.",{"@graph":69,"@context":122},[70,84,105],{"@type":71,"itemListElement":72},"BreadcrumbList",[73,77,79,82],{"item":74,"name":75,"@type":76,"position":8},"https://docshare.wps.com","Home","ListItem",{"item":78,"name":9,"@type":76,"position":14},"https://docshare.wps.com/document/",{"item":80,"name":20,"@type":76,"position":81},"https://docshare.wps.com/document/exam/",3,{"item":83,"name":65,"@type":76,"position":19},"https://docshare.wps.com/document/free-questions-for-cas-005-multiple-choice-security-practice/310426/",{"url":83,"name":65,"@type":85,"image":86,"author":91,"headline":65,"publisher":94,"fileFormat":97,"inLanguage":63,"description":67,"dateModified":98,"datePublished":99,"encodingFormat":97,"isAccessibleForFree":100,"interactionStatistic":101},"DigitalDocument",{"url":87,"@type":88,"width":89,"height":90},"https://docshare.wps.com/thumbnails/free-questions-for-cas-005-multiple-choice-security-practice/310426.png","ImageObject",300,407,{"name":92,"@type":93},"McGucket","Person",{"url":74,"name":95,"@type":96},"DocShare","Organization","application/pdf","2026-11-04","2026-09-20",true,{"@type":102,"interactionType":103,"userInteractionCount":44},"InteractionCounter",{"@type":104},"ViewAction",{"@type":106,"mainEntity":107},"FAQPage",[108,114,118],{"name":109,"@type":110,"acceptedAnswer":111},"How should the organization prioritize patching for internet-facing hosts in Question 1?","Question",{"text":112,"@type":113},"Prioritize the host that is both internet-facing and shows higher risk indicators such as bind/DNS role and exploit availability. The explanation highlights Server2 as the priority due to its public exposure and exploit proof-of-concept.","Answer",{"name":115,"@type":110,"acceptedAnswer":116},"What cipher choice best satisfies the requirements in Question 2?",{"text":117,"@type":113},"ChaCha20-Poly1305. The document explains it is efficient on limited hardware, supports strong security with lower RAM and CPU usage, and works natively with TLS 1.3.",{"name":119,"@type":110,"acceptedAnswer":120},"Why are the CBC options not recommended in the TLS 1.3 encryption scenario?",{"text":121,"@type":113},"CBC-based suites like IDEA-CBC and Camellia-CBC are less efficient and are described as not recommended under TLS 1.3, while the selected suite offers better performance characteristics for the given environment.","https://schema.org",{"og:url":83,"og:type":124,"og:title":65,"og:site_name":95,"og:description":67},"article",{"robots":126,"canonical":83},"index,follow",{"doc_id":128,"site_id":62},310426,1790819769,{"code":4,"msg":5,"data":131},{"doc_id":128,"user_id":132,"nickname":92,"user_avatar":133,"doc_module":4,"category_id":19,"category_name":20,"doc_title":65,"doc_description":67,"doc_content":134,"file_id":135,"file_url":136,"file_type":137,"file_size":138,"view_count":44,"is_deleted":4,"is_public":8,"is_downloadable":8,"audit_status":8,"page_count":139,"language":140,"language_code":63,"site_id":62,"html_lang":63,"table_of_contents":141,"faqs":142,"seo_title":143,"seo_description":67,"update_tm":144,"read_time":36,"preview_page_count":4},1236954412713,"https://us-avatar.wpscdn.com/davatar_29158cc5080c5b710cf443261637dec0","# Free Questions for CAS-005\n\nShared by Holden on 16-04-2026  \nFor More Free Questions and Preparation ResourcesCheck the Links on Last Page  \nQuestion 1                     \nQuestion Type:MultipleChoice                              \nA security analyst is reviewing the following vulnerability assessment report:  \n192.168.1.5,Host =Server1,CVSS 7.5,Web Server,Remotely Executable =Yes,Exploit =Yes205.1.3.5,Host =Server2,CVSS 6.5,Bind Server,Remotely Executable =Yes,Exploit =POC207.1.5.7,Host =Server3,CVSS 5.5,Email Server,Remotely Executable =Yes,Exploit =Yes192.168.1.6,Host =Server4,CVSS 9.8,Domain Controller,Remotely Executable =Yes,Exploit=Yes  \nWhich of the following should be patched first to minimize attacks against internet-facing hosts?  \nOptions:                                \nA-Serverl  \nA-Pass-the-hash attack:This attack involves using a stolen hash of a user's password toauthenticate without needing the actual password.It's unrelated to software package integrity.Why A is the Correct Answer:  \nA supply chain attack is exactly what the organization is trying to mitigate.By creating a registryof known-good software packages and their hashes,they can verify that the packages they areusing are legitimate and haven't been altered.  \nIf an attacker were to compromise a software package in the supply chain,the hash of thealtered package would not match the hash in the organization's registry.This would immediatelyalert the organization to a potential compromise.  \nCASP+Relevance:This aligns with the CASP+exam objectives,which emphasize the importanceof risk management,threat intelligence,and implementing security controls to address variousattack vectors,including supply chain risks.  \nHow the Registry Works(Elaboration based on CASP+principles):  \nHashing:When a package is vetted,a cryptographic hash function(like SHA-256)is used togenerate a unique 'fingerprint'(the hash)of the package's contents.  \nVerification:Before installing or using a package,its hash is calculated and compared to the hashstored in the registry.A match confirms the package's integrity.A mismatch indicates tampering.Incident Response:If a vulnerability is discovered in a commonly used package,the registryhelps the organization quickly identify which systems are affected based on the dependency listand the stored hashes.  \nIn conclusion,maintaining a registry of software dependencies with hashes is a crucial securitycontrol that directly addresses the threat of supply chain attacks by ensuring the integrity andauthenticity of software packages.The use of hash functions for verification is a common practicein security and is emphasized in the CASP+material.B-Server2  \nB-Configure a proxy policy that allows only fully qualified domain names needed to communicateto a portal.C-Server3  \nC-Running the container in an isolated network and placing a load balancer in a public-facingnetwork.Adding the following ACL to the load balancer:PZRKZI HTTES from 0-0.0.0.0/0 pert 443D-Server4D-Update the MX record to contain only the primary email server.  \nAnswer:                                      \nB,B  \n## Explanation:\n\nThe question focuses oninternet-facing hosts,implying external exposure.CVSS scores,remoteexecutability,and exploitavailability guide prioritization.Server2(205.1.3.5,CVSS 6.5,BindServer)has a public IP,suggesting it's internet-facing,unlike Serverl and Server4(192.168.x.x,private IPs).Server3(207.1.5.7,CVSS 5.5)is also public but has a lower score and risk comparedto Server2's proof-of-concept(POC)exploit.Server2's Bind Server(DNS)role is critical andcommonly targeted,making it the priority.  \nOption A:Server1 (CVSS 7.5)is private,not internet-facing.  \nOption B:Server2(CVSS 6.5)is internet-facing with an exploit POC,warranting immediatepatching.  \nOption C:Server3 (CVSS 5.5)is internet-facing but less severe.  \nOption D:Server4 (CVSS 9.8)is critical but private,not internet-facing.  \nQuestion 2                      \nQuestion Type:MultipleChoice  ","cbCaivlbCBZL9H2Y","https://ap.wps.com/l/cbCaivlbCBZL9H2Y","pdf",185442,16,"English","# Free Questions for CAS-005\n## Question 1\n## Explanation\n## Question 2\n## Explanation","[{\"question\":\"How should the organization prioritize patching for internet-facing hosts in Question 1?\",\"answer\":\"Prioritize the host that is both internet-facing and shows higher risk indicators such as bind/DNS role and exploit availability. The explanation highlights Server2 as the priority due to its public exposure and exploit proof-of-concept.\"},{\"question\":\"What cipher choice best satisfies the requirements in Question 2?\",\"answer\":\"ChaCha20-Poly1305. The document explains it is efficient on limited hardware, supports strong security with lower RAM and CPU usage, and works natively with TLS 1.3.\"},{\"question\":\"Why are the CBC options not recommended in the TLS 1.3 encryption scenario?\",\"answer\":\"CBC-based suites like IDEA-CBC and Camellia-CBC are less efficient and are described as not recommended under TLS 1.3, while the selected suite offers better performance characteristics for the given environment.\"}]","Free Questions for CAS-005 - Multiple Choice Security Practice | PDF",1789881989]