A company wants to ensure that all internal emails are digitally signed so that recipients can verify the sender's identity. They have a PKI in place. What should they configure on each user's email client?

The CA's private key for signing.

A shared symmetric key for signing.

The recipient's public key for signing.

The user's private key and certificate for signing.

A company subject to CCPA must allow consumers to request deletion of their personal data. The data is stored in a database that is encrypted at rest. The company also backs up the database to an offsite location. What is the most important consideration when handling a deletion request?

Ensure the data is also deleted from all backups and archives.

Delete the encryption keys used for the consumer's data.

Disable the consumer's account to prevent access.

Encrypt the backups with a different key than the primary database.

What is the primary purpose of certificate-based authentication?

To encrypt data stored on a device

To verify the identity of a user or device using a digital certificate

To ensure data integrity during transmission

To provide a secure communication channel

A company is deploying a new web application that handles financial transactions. They need to ensure that all communication between the client browser and the web server is encrypted and that the server's identity is verified. The application is hosted on a single VM with a public IP. What should they implement?

Use S/MIME to encrypt the HTTP traffic.

Enable BitLocker on the VM's OS drive.

Configure an IPsec tunnel between the client and the server.

Install a TLS certificate on the web server and enforce HTTPS.

Which component is responsible for issuing and managing digital certificates in a PKI?

Certificate revocation list (CRL)

CompTIASecurityX (CASP+)

Domain 3Objective 4

Cryptographic Use Cases CAS-005 Practice Questions (Page 6)

Part of the Security engineering domain, which accounts for 31% of the CAS-005 exam. CompTIA does not publish an official question count, but from its 165-minute exam (~65–110 total, ~20–34 in this domain), expect 4–7 from this objective — we provide 34 practice questions to prepare you well beyond it. (estimate)

34questions here

7free pages

7concepts

31%of the exam

Questions 26–30

26application · medium
A company wants to ensure that all internal emails are digitally signed so that recipients can verify the sender's identity. They have a PKI in place. What should they configure on each user's email client?
Select an answer first
27expert · hard
A company subject to CCPA must allow consumers to request deletion of their personal data. The data is stored in a database that is encrypted at rest. The company also backs up the database to an offsite location. What is the most important consideration when handling a deletion request?
Select an answer first
28foundation · easy
What is the primary purpose of certificate-based authentication?
Select an answer first
29application · medium
A company is deploying a new web application that handles financial transactions. They need to ensure that all communication between the client browser and the web server is encrypted and that the server's identity is verified. The application is hosted on a single VM with a public IP. What should they implement?
Select an answer first
30foundation · easy
Which component is responsible for issuing and managing digital certificates in a PKI?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CAS-005

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CompTIA. “CAS-005” is a trademark of its owner, used for identification only.