A security architect is designing a system that processes highly sensitive personal data. The data must be encrypted at rest and also protected while being processed in memory. The application is running on a shared cloud infrastructure. Which combination of controls best addresses both requirements?

Full disk encryption (FDE) and a hardware security module (HSM) for key storage.

Confidential computing with a trusted execution environment (TEE) and encrypted storage.

Transparent data encryption (TDE) and TLS for all network connections.

Application-level encryption and a VPN for all access.

An organization wants to implement certificate-based authentication for VPN access. They have an internal Active Directory Certificate Services (AD CS) infrastructure. What must be configured on the VPN server to trust the certificates issued by AD CS?

Set up a RADIUS server to issue certificates.

Configure IPsec to use pre-shared keys.

Enable S/MIME on the VPN server.

Install the root CA certificate of AD CS into the VPN server's trusted root store.

A startup is building a system to track the provenance of luxury goods. Each item will have a unique digital record that is updated at each stage of the supply chain. The records must be tamper-evident and verifiable by any party. Which cryptographic feature of blockchain is most directly responsible for tamper-evidence?

Digital signatures on each transaction.

Public key cryptography for user identities.

Cryptographic hash chaining of blocks.

Symmetric encryption of the ledger data.

CompTIASecurityX (CASP+)

Domain 3Objective 4

Cryptographic Use Cases CAS-005 Practice Questions (Page 2)

Part of the Security engineering domain, which accounts for 31% of the CAS-005 exam. CompTIA does not publish an official question count, but from its 165-minute exam (~65–110 total, ~20–34 in this domain), expect 4–7 from this objective — we provide 34 practice questions to prepare you well beyond it. (estimate)

34questions here

7free pages

7concepts

31%of the exam

Questions 6–10

6foundation · easy
Which protocol is commonly used to secure web traffic between a client browser and a web server?
Select an answer first
7expert · hard
A security architect is designing a system that processes highly sensitive personal data. The data must be encrypted at rest and also protected while being processed in memory. The application is running on a shared cloud infrastructure. Which combination of controls best addresses both requirements?
Select an answer first
8application · medium
An organization wants to implement certificate-based authentication for VPN access. They have an internal Active Directory Certificate Services (AD CS) infrastructure. What must be configured on the VPN server to trust the certificates issued by AD CS?
Select an answer first
9application · medium
A startup is building a system to track the provenance of luxury goods. Each item will have a unique digital record that is updated at each stage of the supply chain. The records must be tamper-evident and verifiable by any party. Which cryptographic feature of blockchain is most directly responsible for tamper-evidence?
Select an answer first
10foundation · easy
Which of the following is an example of a technology used to encrypt data at rest?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CAS-005

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CompTIA. “CAS-005” is a trademark of its owner, used for identification only.

Cryptographic Use Cases CAS-005 Practice Questions (Page 2)

Questions 6–10

Which protocol is commonly used to secure web traffic between a client browser and a web server?

An organization wants to implement certificate-based authentication for VPN access. They have an internal Active Directory Certificate Services (AD CS) infrastructure. What must be configured on the VPN server to trust the certificates issued by AD CS?

Which of the following is an example of a technology used to encrypt data at rest?

Keep studying — Security engineering