Why is it important to use a minimal base image for containers?

It eliminates the need for security scanning

It allows the container to run as root

It makes the container run faster

Which practice is a security best practice for container images?

Running containers as root by default

Scanning images for vulnerabilities before deployment

Using the latest tag for all images

Storing images in a public registry

A security team is hardening a containerized application. They want to ensure that a compromised container cannot access the host operating system or other containers. Which configuration should be applied?

Disable the container runtime's security features to improve performance

Use the host network namespace for the container to simplify networking

Run containers with a non-root user and drop all Linux capabilities

Mount the host's /proc filesystem into the container for monitoring

A company is developing a serverless application that processes user-uploaded images. The security team is reviewing the application's security posture. Which security consideration is unique to serverless computing?

The function's network access is controlled by the customer's firewall

The function's runtime must be patched by the customer

The function's execution environment is ephemeral and managed by the provider

The function's code is stored in a public repository

A company has a mix of sanctioned and unsanctioned cloud applications. The security team wants to implement a CASB to enforce DLP policies on sanctioned applications and detect shadow IT. They also need to block malicious traffic in real-time. The company has a large number of remote users who are not connected to the corporate VPN. Which CASB deployment strategy is most effective?

Deploy a log-based CASB to analyze traffic logs

Deploy an API-based CASB for sanctioned apps and a proxy-based CASB for all web traffic

Deploy only a proxy-based CASB and route all traffic through it

Deploy only an API-based CASB for all cloud applications

CompTIASecurityX (CASP+)

Domain 2Objective 1

Cloud Capabilities CAS-005 Practice Questions (Page 1)

Part of the Security architecture domain, which accounts for 27% of the CAS-005 exam. CompTIA does not publish an official question count, but from its 165-minute exam (~65–110 total, ~18–30 in this domain), expect 3–4 from this objective — we provide 36 practice questions to prepare you well beyond it. (estimate)

36questions here

8free pages

10concepts

27%of the exam

Questions 1–5

1foundation · easy
Why is it important to use a minimal base image for containers?
Select an answer first
2foundation · easy
Which practice is a security best practice for container images?
Select an answer first
3application · medium
A security team is hardening a containerized application. They want to ensure that a compromised container cannot access the host operating system or other containers. Which configuration should be applied?
Select an answer first
4application · medium
A company is developing a serverless application that processes user-uploaded images. The security team is reviewing the application's security posture. Which security consideration is unique to serverless computing?
Select an answer first
5expert · hard
A company has a mix of sanctioned and unsanctioned cloud applications. The security team wants to implement a CASB to enforce DLP policies on sanctioned applications and detect shadow IT. They also need to block malicious traffic in real-time. The company has a large number of remote users who are not connected to the corporate VPN. Which CASB deployment strategy is most effective?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CAS-005

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CompTIA. “CAS-005” is a trademark of its owner, used for identification only.