A security team wants to automate a series of tasks that involve multiple systems, such as gathering logs, enriching them with threat intelligence, and sending a notification. What is the best way to design this?

Use a spreadsheet to track tasks

Use a single script that runs all tasks sequentially

A security team wants to automate the retrieval of security findings from a cloud provider's security service. Which of the following is the most appropriate method?

Call the cloud provider's API to fetch findings

Manually review the security dashboard

Use a packet sniffer to capture API traffic

Use a vulnerability scanner on the cloud provider's infrastructure

A developer wants to programmatically create and manage virtual machines in a cloud environment. What is the standard way to interact with the cloud provider's services from a script?

Use a local virtualization tool

A company wants to automate the deployment of a new microservices-based application. The application must be deployed to multiple environments (development, staging, production) with consistent configuration. The team also wants to automate the patching of the underlying infrastructure. Which approach best meets these requirements?

Use a Bash script to deploy the application and a separate script to patch the infrastructure.

Use Terraform to provision infrastructure and Kubernetes to deploy the application, with GitOps for configuration management.

Use Ansible to configure servers and manually deploy the application.

Use a cloud provider's native deployment service, such as AWS Elastic Beanstalk.

CompTIASecurityX (CASP+)

Domain 3Objective 1

Automation CAS-005 Practice Questions (Page 3)

Part of the Security engineering domain, which accounts for 31% of the CAS-005 exam. CompTIA does not publish an official question count, but from its 165-minute exam (~65–110 total, ~20–34 in this domain), expect 4–7 from this objective — we provide 37 practice questions to prepare you well beyond it. (estimate)

37questions here

8free pages

11concepts

31%of the exam

Questions 11–15

11foundation · easy
A security team wants to automate a series of tasks that involve multiple systems, such as gathering logs, enriching them with threat intelligence, and sending a notification. What is the best way to design this?
Select an answer first
12foundation · easy
A security team wants to automate the retrieval of security findings from a cloud provider's security service. Which of the following is the most appropriate method?
Select an answer first
13foundation · easy
A security engineer needs to write a Python script that reads a list of IP addresses from a text file, one per line, and processes each one. Which Python construct is most appropriate to iterate over the lines of the file?
Select an answer first
14foundation · easy
A developer wants to programmatically create and manage virtual machines in a cloud environment. What is the standard way to interact with the cloud provider's services from a script?
Select an answer first
15expert · hard
A company wants to automate the deployment of a new microservices-based application. The application must be deployed to multiple environments (development, staging, production) with consistent configuration. The team also wants to automate the patching of the underlying infrastructure. Which approach best meets these requirements?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CAS-005

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CompTIA. “CAS-005” is a trademark of its owner, used for identification only.

Automation CAS-005 Practice Questions (Page 3)

Questions 11–15

A security team wants to automate a series of tasks that involve multiple systems, such as gathering logs, enriching them with threat intelligence, and sending a notification. What is the best way to design this?

A security team wants to automate the retrieval of security findings from a cloud provider's security service. Which of the following is the most appropriate method?

A security engineer needs to write a Python script that reads a list of IP addresses from a text file, one per line, and processes each one. Which Python construct is most appropriate to iterate over the lines of the file?

A developer wants to programmatically create and manage virtual machines in a cloud environment. What is the standard way to interact with the cloud provider's services from a script?

Keep studying — Security engineering