A company uses a hybrid cloud environment with a VPN connection to Azure. They want to detect if an attacker is trying to brute-force passwords on their Azure VMs. Which detective control should they implement?

Configure Azure Firewall to log all traffic.

Use Azure Policy to enforce strong passwords.

Use Azure Network Watcher to capture packet captures.

Enable Azure Defender for Servers and review security alerts.

Which of the following is a key requirement for establishing a secure customer-to-cloud connection?

Public IP address for all cloud resources

A company uses a cloud-based identity provider (IdP) and a cloud-based SIEM. They want to integrate the two so that security events from the IdP are automatically sent to the SIEM for analysis. They also want to ensure that the integration is secure and does not expose credentials. Which approach should they take?

Use the SIEM's built-in connector for the IdP and configure it with OAuth 2.0 client credentials.

Export logs from the IdP and manually upload them to the SIEM.

Use a shared API key embedded in the integration script.

Use a VPN between the IdP and SIEM.

A company is migrating its on-premises data center to Azure. They need to connect their existing MPLS-based corporate network to Azure so that all traffic between the two environments is encrypted and does not traverse the public internet. They also want to monitor the connection for anomalies. Which solution should they implement?

Azure ExpressRoute with private peering and Azure Monitor for network diagnostics

Azure Private Link with a private endpoint and Azure Sentinel

Azure VPN Gateway with IPsec tunnels and Azure Monitor for network diagnostics

Azure Virtual WAN with VPN Gateway and Azure Network Watcher

CompTIASecurityX (CASP+)

Domain 2Objective 3

Cloud Control Strategies CAS-005 Practice Questions (Page 1)

Part of the Security architecture domain, which accounts for 27% of the CAS-005 exam. CompTIA does not publish an official question count, but from its 165-minute exam (~65–110 total, ~18–30 in this domain), expect 3–4 from this objective — we provide 30 practice questions to prepare you well beyond it. (estimate)

30questions here

6free pages

6concepts

27%of the exam

Questions 1–5

1foundation · easy
A company uses a cloud-based customer relationship management (CRM) system and a cloud-based enterprise resource planning (ERP) system. The company wants these systems to share data securely. What is this an example of?
Select an answer first
2application · medium
A company uses a hybrid cloud environment with a VPN connection to Azure. They want to detect if an attacker is trying to brute-force passwords on their Azure VMs. Which detective control should they implement?
Select an answer first
3foundation · easy
Which of the following is a key requirement for establishing a secure customer-to-cloud connection?
Select an answer first
4expert · hard
A company uses a cloud-based identity provider (IdP) and a cloud-based SIEM. They want to integrate the two so that security events from the IdP are automatically sent to the SIEM for analysis. They also want to ensure that the integration is secure and does not expose credentials. Which approach should they take?
Select an answer first
5application · medium
A company is migrating its on-premises data center to Azure. They need to connect their existing MPLS-based corporate network to Azure so that all traffic between the two environments is encrypted and does not traverse the public internet. They also want to monitor the connection for anomalies. Which solution should they implement?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CAS-005

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CompTIA. “CAS-005” is a trademark of its owner, used for identification only.

Cloud Control Strategies CAS-005 Practice Questions (Page 1)

Questions 1–5

A company uses a cloud-based customer relationship management (CRM) system and a cloud-based enterprise resource planning (ERP) system. The company wants these systems to share data securely. What is this an example of?

A company uses a hybrid cloud environment with a VPN connection to Azure. They want to detect if an attacker is trying to brute-force passwords on their Azure VMs. Which detective control should they implement?

Which of the following is a key requirement for establishing a secure customer-to-cloud connection?

Keep studying — Security architecture