A company is migrating a containerized application to a public cloud IaaS platform. The security team is defining responsibilities. Which security task is the responsibility of the cloud customer, not the cloud provider?

Patching the operating system of the virtual machines hosting the containers

Managing the network infrastructure

Securing the physical data center facilities

What is the primary purpose of a cloud access security broker (CASB) in the context of shadow IT?

To replace the need for a firewall

To encrypt all data stored in the cloud

To discover and control the use of unauthorized cloud services

To provide users with a list of approved cloud services

What is the primary role of Ansible in IT operations?

Provisioning cloud infrastructure

Configuration management and automation

A security team suspects employees are using a cloud storage service that is not approved by the organization. The team wants a method to detect this usage without relying on user self-reporting or manual audits. Which approach is most effective for detecting this shadow IT usage?

Review employee expense reports for cloud service subscriptions

Disable all outbound internet access except for approved services

Analyze network traffic logs for connections to known cloud storage service domains

Conduct a survey asking employees to list all cloud services they use

A development team uses a CI/CD pipeline to deploy infrastructure changes. The pipeline currently stores secrets in plaintext within the pipeline configuration. The security team wants to mitigate the risk of secret exposure. Which action should the team take?

Encrypt the pipeline configuration file at rest

Integrate a secrets management solution and reference secrets from the pipeline

Rotate the secrets on a monthly basis

Restrict access to the pipeline configuration to only the development team

CompTIASecurityX (CASP+)

Domain 2Objective 1

Cloud Capabilities CAS-005 Practice Questions (Page 4)

Part of the Security architecture domain, which accounts for 27% of the CAS-005 exam. CompTIA does not publish an official question count, but from its 165-minute exam (~65–110 total, ~18–30 in this domain), expect 3–4 from this objective — we provide 36 practice questions to prepare you well beyond it. (estimate)

36questions here

8free pages

10concepts

27%of the exam

Questions 16–20

16application · medium
A company is migrating a containerized application to a public cloud IaaS platform. The security team is defining responsibilities. Which security task is the responsibility of the cloud customer, not the cloud provider?
Select an answer first
17foundation · easy
What is the primary purpose of a cloud access security broker (CASB) in the context of shadow IT?
Select an answer first
18foundation · easy
What is the primary role of Ansible in IT operations?
Select an answer first
19application · medium
A security team suspects employees are using a cloud storage service that is not approved by the organization. The team wants a method to detect this usage without relying on user self-reporting or manual audits. Which approach is most effective for detecting this shadow IT usage?
Select an answer first
20application · medium
A development team uses a CI/CD pipeline to deploy infrastructure changes. The pipeline currently stores secrets in plaintext within the pipeline configuration. The security team wants to mitigate the risk of secret exposure. Which action should the team take?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CAS-005

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CompTIA. “CAS-005” is a trademark of its owner, used for identification only.