Which practice is a security best practice for a CI/CD pipeline?

Running security scans only at the end of the pipeline

Storing secrets in the source code repository

Using signed commits and code review

Granting all developers admin access to the pipeline

Which method is commonly used to detect shadow IT usage of cloud services?

Conducting employee satisfaction surveys

Disabling all external network access

Installing antivirus software on servers

Reviewing firewall and proxy logs

What is the primary function of Terraform in cloud environments?

Infrastructure provisioning as code

Configuration management of existing servers

A company uses Ansible to manage servers. The security team is concerned about the security of the Ansible control node and the playbooks. They want to ensure that only authorized personnel can make changes and that secrets are not exposed. Which combination of controls should be implemented?

Store playbooks in a public repository and use SSH keys

Run Ansible tasks as root and disable logging

Use Ansible Vault for secrets and implement role-based access control (RBAC) for the control node

Use a shared account for all administrators

Which security practice is important when using Ansible?

Running playbooks with root privileges by default

Encrypting sensitive data with Ansible Vault

Using plaintext passwords in playbooks

CompTIASecurityX (CASP+)

Domain 2Objective 1

Cloud Capabilities CAS-005 Practice Questions (Page 5)

Part of the Security architecture domain, which accounts for 27% of the CAS-005 exam. CompTIA does not publish an official question count, but from its 165-minute exam (~65–110 total, ~18–30 in this domain), expect 3–4 from this objective — we provide 36 practice questions to prepare you well beyond it. (estimate)

36questions here

8free pages

10concepts

27%of the exam

Questions 21–25

21foundation · easy
Which practice is a security best practice for a CI/CD pipeline?
Select an answer first
22foundation · easy
Which method is commonly used to detect shadow IT usage of cloud services?
Select an answer first
23foundation · easy
What is the primary function of Terraform in cloud environments?
Select an answer first
24expert · hard
A company uses Ansible to manage servers. The security team is concerned about the security of the Ansible control node and the playbooks. They want to ensure that only authorized personnel can make changes and that secrets are not exposed. Which combination of controls should be implemented?
Select an answer first
25foundation · easy
Which security practice is important when using Ansible?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CAS-005

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CompTIA. “CAS-005” is a trademark of its owner, used for identification only.