A large enterprise is planning to integrate a new customer-facing mobile app with an existing on-premises ERP system. The app will be hosted in the cloud. The data flow includes customer order data from the mobile app to the ERP system. The security team is conducting a data flow analysis. They discover that the ERP system is also accessible from the corporate network. The team must ensure that the data is protected and that the ERP system is not exposed to the internet. Which architecture BEST meets these requirements?

Use a cloud-based API gateway that forwards requests to the ERP system via a VPN.

Allow the mobile app to connect directly to the ERP system using a public IP.

Place the ERP system in a DMZ with a web application firewall.

Expose the ERP system directly to the internet with a strong firewall.

Which factor is typically considered when assessing risk in system architecture?

The number of employees in the company

The likelihood of a threat exploiting a vulnerability

The brand of the operating system

A security architect is reviewing the architecture of a new application that will be deployed in a hybrid cloud environment. The application will process sensitive financial data. The architect must ensure that the data is protected both at rest and in transit. Which architecture is MOST appropriate?

Store data on-premises and use a VPN for cloud access.

Store data in the cloud and use encryption for data at rest and in transit.

Use a single cloud provider for all data storage and processing.

Use a combination of cloud and on-premises storage with encryption and strict access controls.

A financial application processes credit card payments. The data flow diagram shows that cardholder data is sent from the web server to the payment processor, and then a response is sent back. The security team is reviewing the diagram. Which finding represents the MOST significant security risk?

The payment processor uses a different API version than the web server.

The web server logs the response time of the payment processor.

The web server stores the full card number in a database for order tracking.

The data flow diagram does not show the network topology.

Which practice helps secure a trust boundary?

Sharing credentials across the boundary

Encrypting data as it crosses the boundary

CompTIASecurityX (CASP+)

Domain 1Objective 9

Attack Surface CAS-005 Practice Questions (Page 5)

Part of the Governance, risk, and compliance domain, which accounts for 20% of the CAS-005 exam. CompTIA does not publish an official question count, but from its 165-minute exam (~65–110 total, ~13–22 in this domain), expect 1–2 from this objective — we provide 33 practice questions to prepare you well beyond it. (estimate)

33questions here

7free pages

9concepts

20%of the exam

Questions 21–25

21expert · hard
A large enterprise is planning to integrate a new customer-facing mobile app with an existing on-premises ERP system. The app will be hosted in the cloud. The data flow includes customer order data from the mobile app to the ERP system. The security team is conducting a data flow analysis. They discover that the ERP system is also accessible from the corporate network. The team must ensure that the data is protected and that the ERP system is not exposed to the internet. Which architecture BEST meets these requirements?
Select an answer first
22foundation · easy
Which factor is typically considered when assessing risk in system architecture?
Select an answer first
23expert · hard
A security architect is reviewing the architecture of a new application that will be deployed in a hybrid cloud environment. The application will process sensitive financial data. The architect must ensure that the data is protected both at rest and in transit. Which architecture is MOST appropriate?
Select an answer first
24application · medium
A financial application processes credit card payments. The data flow diagram shows that cardholder data is sent from the web server to the payment processor, and then a response is sent back. The security team is reviewing the diagram. Which finding represents the MOST significant security risk?
Select an answer first
25foundation · easy
Which practice helps secure a trust boundary?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CAS-005

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CompTIA. “CAS-005” is a trademark of its owner, used for identification only.

Attack Surface CAS-005 Practice Questions (Page 5)

Questions 21–25

Which factor is typically considered when assessing risk in system architecture?

A financial application processes credit card payments. The data flow diagram shows that cardholder data is sent from the web server to the payment processor, and then a response is sent back. The security team is reviewing the diagram. Which finding represents the MOST significant security risk?

Which practice helps secure a trust boundary?

Keep studying — Governance, risk, and compliance