A financial services firm uses a cloud-based collaboration suite. An employee accidentally shares a sensitive spreadsheet with an external partner via a public link. The security team needs to prevent this type of data leakage in the future. Which control should be implemented?

Train employees on proper data sharing procedures and require them to acknowledge the policy annually.

Configure a data loss prevention (DLP) policy that scans for sensitive content and blocks external sharing of files containing credit card numbers.

Require multi-factor authentication (MFA) for all external users accessing shared files.

Disable all external sharing for the entire organization.

Which of the following is a common vulnerability associated with insecure cloud storage?

Implementing lifecycle management policies

Publicly accessible storage buckets

What is the primary goal of a data leakage prevention (DLP) strategy in a cloud environment?

To manage user access permissions

To ensure data is available during outages

To encrypt all data stored in the cloud

To prevent unauthorized transmission of sensitive data

A company is using a cloud KMS to manage encryption keys for various applications. The security team wants to automate the process of replacing keys on a regular schedule to reduce the risk of key compromise. Which key management practice should be implemented?

Disabling key rotation and using a single, long-lived key.

Using a new key for each encryption operation.

Automated key rotation with a defined schedule, such as every 90 days.

Manual key rotation on a quarterly basis.

A company is decommissioning a cloud-based virtual machine that contained sensitive data on its local disk. The security team needs to ensure that the data is not recoverable after the VM is deleted. Which action should be taken?

Delete the VM and its associated disks.

Encrypt the disk with a customer-managed key and then delete the key after the VM is decommissioned.

Move the VM to a different resource group and then delete it.

Overwrite the disk with random data multiple times before deleting the VM.

CompTIASecurityX (CASP+)

Domain 2Objective 2

Cloud Data Security CAS-005 Practice Questions (Page 1)

Part of the Security architecture domain, which accounts for 27% of the CAS-005 exam. CompTIA does not publish an official question count, but from its 165-minute exam (~65–110 total, ~18–30 in this domain), expect 3–4 from this objective — we provide 20 practice questions to prepare you well beyond it. (estimate)

20questions here

4free pages

5concepts

27%of the exam

Questions 1–5

1application · medium
A financial services firm uses a cloud-based collaboration suite. An employee accidentally shares a sensitive spreadsheet with an external partner via a public link. The security team needs to prevent this type of data leakage in the future. Which control should be implemented?
Select an answer first
2foundation · easy
Which of the following is a common vulnerability associated with insecure cloud storage?
Select an answer first
3foundation · easy
What is the primary goal of a data leakage prevention (DLP) strategy in a cloud environment?
Select an answer first
4application · medium
A company is using a cloud KMS to manage encryption keys for various applications. The security team wants to automate the process of replacing keys on a regular schedule to reduce the risk of key compromise. Which key management practice should be implemented?
Select an answer first
5application · medium
A company is decommissioning a cloud-based virtual machine that contained sensitive data on its local disk. The security team needs to ensure that the data is not recoverable after the VM is deleted. Which action should be taken?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CAS-005

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CompTIA. “CAS-005” is a trademark of its owner, used for identification only.