A company is subject to GDPR and needs to protect the personal data of EU residents. They are using a cloud provider that offers encryption at rest by default. What additional measure should they implement to ensure they can respond to a data subject access request (DSAR) effectively?

Disable encryption to simplify data retrieval.

Ensure encryption keys are backed up and accessible to the security team.

Store all data in a single region to simplify access.

Use only ephemeral keys that are deleted after each session.

A law firm needs to send a confidential settlement document to an external attorney. The recipient uses a different email system. The firm requires that the email be encrypted and that the recipient can verify the sender's identity. What should the sender use?

A shared password-protected ZIP file attached to the email.

S/MIME with the recipient's public certificate.

TLS for the SMTP connection only.

PGP with the sender's own private key only.

An organization is implementing mutual TLS (mTLS) for a microservices architecture. Each service must authenticate itself to other services. What is the most critical component to manage for this to work securely?

The load balancer's configuration.

The public IP addresses of the services.

The private keys of each service's certificate.

The TLS version used for the connection.

Which of the following is the primary purpose of encrypting data at rest?

To protect stored data from unauthorized access if the storage medium is compromised

To ensure data is not modified during transmission

To verify the identity of users accessing the storage system

To speed up read and write operations on the storage device

CompTIASecurityX (CASP+)

Domain 3Objective 4

Cryptographic Use Cases CAS-005 Practice Questions (Page 4)

Part of the Security engineering domain, which accounts for 31% of the CAS-005 exam. CompTIA does not publish an official question count, but from its 165-minute exam (~65–110 total, ~20–34 in this domain), expect 4–7 from this objective — we provide 34 practice questions to prepare you well beyond it. (estimate)

34questions here

7free pages

7concepts

31%of the exam

Questions 16–20

16application · medium
A company is subject to GDPR and needs to protect the personal data of EU residents. They are using a cloud provider that offers encryption at rest by default. What additional measure should they implement to ensure they can respond to a data subject access request (DSAR) effectively?
Select an answer first
17application · medium
A law firm needs to send a confidential settlement document to an external attorney. The recipient uses a different email system. The firm requires that the email be encrypted and that the recipient can verify the sender's identity. What should the sender use?
Select an answer first
18application · medium
An organization is implementing mutual TLS (mTLS) for a microservices architecture. Each service must authenticate itself to other services. What is the most critical component to manage for this to work securely?
Select an answer first
19foundation · easy
Which of the following is the primary purpose of encrypting data at rest?
Select an answer first
20foundation · easy
Which technology is designed to protect data while it is being processed in memory?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CAS-005

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CompTIA. “CAS-005” is a trademark of its owner, used for identification only.