A supply chain consortium wants to create an immutable record of product shipments that all members can verify without a central authority. Each member will maintain a copy of the ledger. Which technology should they adopt?

A digital signature applied to a shared spreadsheet.

A public cloud object storage bucket with versioning.

A centralized database with checksums.

A private blockchain with a consensus mechanism.

Which of the following is a primary use case for IPsec?

Creating a secure VPN tunnel between networks

Securing data stored on a hard drive

What is the fundamental purpose of a blockchain?

To encrypt data at rest on a storage device

To authenticate users using certificates

To provide a decentralized, tamper-evident ledger of transactions

To securely transmit data over a network

An organization wants to replace username/password authentication for its internal web portal with certificate-based authentication. They have issued smart cards to all employees. What must be configured on the web server to accept these smart card certificates?

Enable TLS client authentication and configure the server to trust the issuing CA.

Configure the web server to use S/MIME for authentication.

Set up a RADIUS server for certificate validation.

Install the smart card driver on the web server.

A security team is investigating a malware infection that stole data from a process's memory. The data was not encrypted at rest, but the team wants to prevent this type of theft in the future. Which control would directly protect data in use?

Deploy a trusted execution environment (TEE) for the application.

Use a hardware security module (HSM) for all application data.

Implement full disk encryption (FDE).

Encrypt the network traffic with TLS.

CompTIASecurityX (CASP+)

Domain 3Objective 4

Cryptographic Use Cases CAS-005 Practice Questions (Page 1)

Part of the Security engineering domain, which accounts for 31% of the CAS-005 exam. CompTIA does not publish an official question count, but from its 165-minute exam (~65–110 total, ~20–34 in this domain), expect 4–7 from this objective — we provide 34 practice questions to prepare you well beyond it. (estimate)

34questions here

7free pages

7concepts

31%of the exam

Questions 1–5

1application · medium
A supply chain consortium wants to create an immutable record of product shipments that all members can verify without a central authority. Each member will maintain a copy of the ledger. Which technology should they adopt?
Select an answer first
2foundation · easy
Which of the following is a primary use case for IPsec?
Select an answer first
3foundation · easy
What is the fundamental purpose of a blockchain?
Select an answer first
4application · medium
An organization wants to replace username/password authentication for its internal web portal with certificate-based authentication. They have issued smart cards to all employees. What must be configured on the web server to accept these smart card certificates?
Select an answer first
5application · medium
A security team is investigating a malware infection that stole data from a process's memory. The data was not encrypted at rest, but the team wants to prevent this type of theft in the future. Which control would directly protect data in use?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CAS-005

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CompTIA. “CAS-005” is a trademark of its owner, used for identification only.