A company is using a cloud-based file sharing service. The security team discovers that an employee has been sharing files with a personal email address. The team needs to implement a control to prevent this type of data exfiltration. Which control should be implemented?

Monitor user activity logs and manually review them for suspicious sharing.

Disable all external sharing for the organization.

Require multi-factor authentication (MFA) for all users.

Configure a data loss prevention (DLP) policy that blocks sharing with personal email domains.

Which of the following is a common cause of data leakage in cloud environments?

Using strong encryption for data at rest

Regularly patching cloud services

Implementing multi-factor authentication

Misconfigured cloud storage permissions

What is the primary purpose of a cloud key management service (KMS)?

To centrally manage encryption keys

A company is using a cloud provider's key management service (KMS) to encrypt data in cloud storage. The security team wants to ensure that if a single KMS key is compromised, the impact is limited to a small set of data. Which key management strategy should be implemented?

Use a unique key for each application or data classification level.

Use a single, centralized key for all data to simplify management.

Store the keys in the same region as the data to reduce latency.

Rotate the keys on a monthly basis.

A company is using a cloud-based database service. The security team is concerned about the database being exposed to the internet. The database is only accessed by an application running on a virtual machine in the same cloud environment. Which configuration should be implemented to secure the database?

Place the database and the application server in the same virtual network (VNet) and configure a network security group (NSG) to allow traffic only from the application server's private IP address.

Enable SSL/TLS for the database connection.

Use a shared access signature (SAS) token for database authentication.

Assign the database a public IP address and restrict access by IP address of the application server.

CompTIASecurityX (CASP+)

Domain 2Objective 2

Cloud Data Security CAS-005 Practice Questions (Page 2)

Part of the Security architecture domain, which accounts for 27% of the CAS-005 exam. CompTIA does not publish an official question count, but from its 165-minute exam (~65–110 total, ~18–30 in this domain), expect 3–4 from this objective — we provide 20 practice questions to prepare you well beyond it. (estimate)

20questions here

4free pages

5concepts

27%of the exam

Questions 6–10

6application · medium
A company is using a cloud-based file sharing service. The security team discovers that an employee has been sharing files with a personal email address. The team needs to implement a control to prevent this type of data exfiltration. Which control should be implemented?
Select an answer first
7foundation · easy
Which of the following is a common cause of data leakage in cloud environments?
Select an answer first
8foundation · easy
What is the primary purpose of a cloud key management service (KMS)?
Select an answer first
9application · medium
A company is using a cloud provider's key management service (KMS) to encrypt data in cloud storage. The security team wants to ensure that if a single KMS key is compromised, the impact is limited to a small set of data. Which key management strategy should be implemented?
Select an answer first
10application · medium
A company is using a cloud-based database service. The security team is concerned about the database being exposed to the internet. The database is only accessed by an application running on a virtual machine in the same cloud environment. Which configuration should be implemented to secure the database?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CAS-005

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CompTIA. “CAS-005” is a trademark of its owner, used for identification only.