Which security consideration is important when using Terraform?

Reviewing Terraform plans before applying

Running Terraform apply without version control

Using hardcoded credentials in configuration files

Storing state files in a public repository

An organization uses Ansible to manage configuration on servers. The security team is concerned about the security of the Ansible control node. Which practice is most important to secure the control node?

Store playbooks in a public repository for easy sharing

Disable logging on the control node to reduce data exposure

Run Ansible tasks with the root user to ensure permissions

Restrict access to the control node and use SSH keys for authentication

What is a security challenge specific to container orchestration platforms like Kubernetes?

Operating system patching on the host

Managing secrets across multiple containers

Network latency between containers

Which limitation is commonly associated with proxy-based CASB deployments?

They only work with on-premises applications

They cannot enforce data-loss prevention policies

They cannot inspect encrypted traffic

They may introduce latency and become a single point of failure

CompTIASecurityX (CASP+)

Domain 2Objective 1

Cloud Capabilities CAS-005 Practice Questions (Page 2)

Part of the Security architecture domain, which accounts for 27% of the CAS-005 exam. CompTIA does not publish an official question count, but from its 165-minute exam (~65–110 total, ~18–30 in this domain), expect 3–4 from this objective — we provide 36 practice questions to prepare you well beyond it. (estimate)

36questions here

8free pages

10concepts

27%of the exam

Questions 6–10

6foundation · easy
Which security consideration is important when using Terraform?
Select an answer first
7application · medium
An organization uses Ansible to manage configuration on servers. The security team is concerned about the security of the Ansible control node. Which practice is most important to secure the control node?
Select an answer first
8application · medium
A security architect is evaluating a CASB solution for a company that uses a sanctioned cloud application. The primary requirement is to block malicious file uploads in real-time, before they reach the cloud service. The company wants to avoid API rate limits and ensure that all traffic, including from unmanaged devices, is inspected. Which CASB deployment mode best meets these requirements?
Select an answer first
9foundation · easy
What is a security challenge specific to container orchestration platforms like Kubernetes?
Select an answer first
10foundation · easy
Which limitation is commonly associated with proxy-based CASB deployments?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CAS-005

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CompTIA. “CAS-005” is a trademark of its owner, used for identification only.