A company is developing a serverless application that processes sensitive data. The security team is defining the security architecture. They are concerned about the risk of sensitive data being exposed in logs and the risk of a compromised function accessing other resources. Which combination of controls should be implemented?

Store sensitive data in the function's environment variables

Disable logging for the functions

Implement data masking in logs and use least-privilege IAM roles for the functions

Grant the functions broad IAM permissions to simplify development

A company is deploying a containerized application on a Kubernetes cluster. The security team wants to ensure that containers run with the least privilege and that the cluster is protected from compromised containers. Which combination of controls should be implemented?

Disable network policies to simplify traffic flow

Mount the host's filesystem into the container

Run containers as a non-root user and implement network policies

Run containers as root and use the host network

What is a common security risk in a CI/CD pipeline?

Automating tests in the pipeline

Hardcoding credentials in build scripts

Using version control for pipeline definitions

CompTIASecurityX (CASP+)

Domain 2Objective 1

Cloud Capabilities CAS-005 Practice Questions (Page 6)

Part of the Security architecture domain, which accounts for 27% of the CAS-005 exam. CompTIA does not publish an official question count, but from its 165-minute exam (~65–110 total, ~18–30 in this domain), expect 3–4 from this objective — we provide 36 practice questions to prepare you well beyond it. (estimate)

36questions here

8free pages

10concepts

27%of the exam

Questions 26–30

26expert · hard
A company is developing a serverless application that processes sensitive data. The security team is defining the security architecture. They are concerned about the risk of sensitive data being exposed in logs and the risk of a compromised function accessing other resources. Which combination of controls should be implemented?
Select an answer first
27foundation · easy
Which control is commonly used to secure communication between containers in an orchestration platform?
Select an answer first
28expert · hard
A company is deploying a containerized application on a Kubernetes cluster. The security team wants to ensure that containers run with the least privilege and that the cluster is protected from compromised containers. Which combination of controls should be implemented?
Select an answer first
29foundation · easy
A security architect is evaluating a CASB deployment that will integrate directly with a cloud provider's management APIs to enforce data-loss prevention policies on files stored in a SaaS application. Which CASB deployment mode does this describe?
Select an answer first
30foundation · easy
What is a common security risk in a CI/CD pipeline?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CAS-005

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CompTIA. “CAS-005” is a trademark of its owner, used for identification only.

Cloud Capabilities CAS-005 Practice Questions (Page 6)

Questions 26–30

Which control is commonly used to secure communication between containers in an orchestration platform?

A company is deploying a containerized application on a Kubernetes cluster. The security team wants to ensure that containers run with the least privilege and that the cluster is protected from compromised containers. Which combination of controls should be implemented?

A security architect is evaluating a CASB deployment that will integrate directly with a cloud provider's management APIs to enforce data-loss prevention policies on files stored in a SaaS application. Which CASB deployment mode does this describe?

What is a common security risk in a CI/CD pipeline?

Keep studying — Security architecture