What is a security consideration unique to serverless computing?

Patching the underlying operating system

Configuring the virtual network

Securing the function code and dependencies

Why is it important to limit the permissions of a serverless function?

To reduce the cost of execution

To avoid the need for code reviews

To increase the function's execution speed

To reduce the attack surface in case of compromise

Which characteristic is a primary advantage of an API-based CASB over a proxy-based CASB?

It can inspect encrypted traffic without decryption

It requires no configuration changes to the cloud service

It can enforce policies on data at rest

It provides real-time blocking of malicious requests

A security architect is reviewing a Terraform configuration that defines a cloud infrastructure. The architect notices that the configuration includes hard-coded credentials for a database. Which security consideration is most important to address?

Add a comment in the Terraform file explaining the credentials

Ensure the Terraform state file is stored in a private repository

Use a secrets management tool to store and retrieve the credentials

Use a more complex password for the database

CompTIASecurityX (CASP+)

Domain 2Objective 1

Cloud Capabilities CAS-005 Practice Questions (Page 7)

Part of the Security architecture domain, which accounts for 27% of the CAS-005 exam. CompTIA does not publish an official question count, but from its 165-minute exam (~65–110 total, ~18–30 in this domain), expect 3–4 from this objective — we provide 36 practice questions to prepare you well beyond it. (estimate)

36questions here

8free pages

10concepts

27%of the exam

Questions 31–35

31foundation · easy
What is a security consideration unique to serverless computing?
Select an answer first
32foundation · easy
Why is it important to limit the permissions of a serverless function?
Select an answer first
33foundation · easy
Which characteristic is a primary advantage of an API-based CASB over a proxy-based CASB?
Select an answer first
34foundation · easy
A company wants to enforce security policies on cloud traffic by routing all user requests through an inline security appliance. Which CASB deployment mode does this describe?
Select an answer first
35application · medium
A security architect is reviewing a Terraform configuration that defines a cloud infrastructure. The architect notices that the configuration includes hard-coded credentials for a database. Which security consideration is most important to address?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CAS-005

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CompTIA. “CAS-005” is a trademark of its owner, used for identification only.