A developer is building a blockchain-based voting system. They need to ensure that each vote is recorded exactly once and cannot be altered. They are considering whether to store the votes directly on the blockchain or store only hashes of the votes. What is the primary advantage of storing only hashes?

It prevents the vote data from being read by unauthorized parties.

It enables verification of vote integrity without exposing the vote content.

It allows the votes to be encrypted at rest.

It reduces the storage size of the blockchain.

What is the primary challenge when protecting data in use?

Data must be encrypted while being transmitted over a network

Data must be decrypted in memory for processing, making it vulnerable to memory attacks

Data must be signed to ensure integrity

Data must be encrypted on the storage medium at all times

What is the role of encryption in complying with data breach notification requirements under regulations like GDPR?

It can reduce the risk that a breach is considered a 'breach of confidentiality' if the data is rendered unintelligible

It makes all data breaches immediately reportable regardless of encryption

It eliminates the need to report any breach

It is not relevant to breach notification

A healthcare organization stores patient records in an Azure Blob Storage account. They must ensure that data is encrypted at rest using customer-managed keys to meet internal security policy. The storage account is already configured with Microsoft-managed key encryption. What should the administrator do to meet the requirement?

Recreate the storage account with the 'require secure transfer' option enabled.

Switch the encryption type to Customer-Managed Keys and associate an Azure Key Vault key.

Apply a private endpoint to the storage account to encrypt all traffic.

Enable Azure Disk Encryption on the storage account.

A company is setting up a site-to-site VPN between its headquarters and a branch office. They need to ensure that the VPN tunnel is encrypted and that both gateways authenticate each other. They want to avoid the overhead of a PKI. What is the most appropriate authentication method?

Username and password for each gateway.

Digital certificates from a public CA.

CompTIASecurityX (CASP+)

Domain 3Objective 4

Cryptographic Use Cases CAS-005 Practice Questions (Page 3)

Part of the Security engineering domain, which accounts for 31% of the CAS-005 exam. CompTIA does not publish an official question count, but from its 165-minute exam (~65–110 total, ~20–34 in this domain), expect 4–7 from this objective — we provide 34 practice questions to prepare you well beyond it. (estimate)

34questions here

7free pages

7concepts

31%of the exam

Questions 11–15

11expert · hard
A developer is building a blockchain-based voting system. They need to ensure that each vote is recorded exactly once and cannot be altered. They are considering whether to store the votes directly on the blockchain or store only hashes of the votes. What is the primary advantage of storing only hashes?
Select an answer first
12foundation · easy
What is the primary challenge when protecting data in use?
Select an answer first
13foundation · easy
What is the role of encryption in complying with data breach notification requirements under regulations like GDPR?
Select an answer first
14application · medium
A healthcare organization stores patient records in an Azure Blob Storage account. They must ensure that data is encrypted at rest using customer-managed keys to meet internal security policy. The storage account is already configured with Microsoft-managed key encryption. What should the administrator do to meet the requirement?
Select an answer first
15expert · hard
A company is setting up a site-to-site VPN between its headquarters and a branch office. They need to ensure that the VPN tunnel is encrypted and that both gateways authenticate each other. They want to avoid the overhead of a PKI. What is the most appropriate authentication method?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CAS-005

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CompTIA. “CAS-005” is a trademark of its owner, used for identification only.

Cryptographic Use Cases CAS-005 Practice Questions (Page 3)

Questions 11–15

What is the primary challenge when protecting data in use?

What is the role of encryption in complying with data breach notification requirements under regulations like GDPR?

A company is setting up a site-to-site VPN between its headquarters and a branch office. They need to ensure that the VPN tunnel is encrypted and that both gateways authenticate each other. They want to avoid the overhead of a PKI. What is the most appropriate authentication method?

Keep studying — Security engineering