A journalist needs to send a sensitive document to a source. The source is not technical and uses a web-based email client. The journalist wants to ensure that only the source can read the email and that the source can verify it came from the journalist. What is the most practical approach?

Use PGP and share the journalist's public key via a key server.

Send the document as an encrypted PDF with a password shared over a separate channel.

Rely on TLS for the webmail connection.

Use S/MIME and send the source a copy of the journalist's public certificate.

A multinational e-commerce company stores EU customer data in a data center in the United States. To comply with GDPR data residency requirements, they must ensure the data is not accessible to unauthorized parties and that it remains within the EU. They are considering moving to a public cloud provider with a region in Germany. What is the most important cryptographic measure to implement?

Use a VPN to encrypt traffic between the US and EU data centers.

Enable TLS for all application connections.

Encrypt the data with customer-managed keys stored in an EU-based key vault.

Apply tokenization to all EU customer data.

A financial services firm processes credit card numbers in memory on a Linux server. A security audit requires that the plaintext data be minimized in memory and that the data be encrypted at rest on disk. The application currently loads the full credit card number into a variable for processing. What is the most effective approach to reduce exposure?

Use Intel SGX enclaves to process the data in an isolated memory region.

Use a hardware security module (HSM) for all application memory.

Encrypt the entire disk with LUKS and rely on that for protection.

Store the credit card number in a swap file to free up RAM.

CompTIASecurityX (CASP+)

Domain 3Objective 4

Cryptographic Use Cases CAS-005 Practice Questions (Page 7)

Part of the Security engineering domain, which accounts for 31% of the CAS-005 exam. CompTIA does not publish an official question count, but from its 165-minute exam (~65–110 total, ~20–34 in this domain), expect 4–7 from this objective — we provide 34 practice questions to prepare you well beyond it. (estimate)

34questions here

7free pages

7concepts

31%of the exam

Questions 31–34

31application · medium
A journalist needs to send a sensitive document to a source. The source is not technical and uses a web-based email client. The journalist wants to ensure that only the source can read the email and that the source can verify it came from the journalist. What is the most practical approach?
Select an answer first
32expert · hard
A multinational e-commerce company stores EU customer data in a data center in the United States. To comply with GDPR data residency requirements, they must ensure the data is not accessible to unauthorized parties and that it remains within the EU. They are considering moving to a public cloud provider with a region in Germany. What is the most important cryptographic measure to implement?
Select an answer first
33expert · hard
A financial services firm processes credit card numbers in memory on a Linux server. A security audit requires that the plaintext data be minimized in memory and that the data be encrypted at rest on disk. The application currently loads the full credit card number into a variable for processing. What is the most effective approach to reduce exposure?
Select an answer first
34foundation · easy
Which cryptographic primitive is used in blockchain to link blocks together and ensure integrity?
Select an answer first

Finished these 4 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to CAS-005

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CompTIA. “CAS-005” is a trademark of its owner, used for identification only.

Cryptographic Use Cases CAS-005 Practice Questions (Page 7)

Questions 31–34

A journalist needs to send a sensitive document to a source. The source is not technical and uses a web-based email client. The journalist wants to ensure that only the source can read the email and that the source can verify it came from the journalist. What is the most practical approach?

Which cryptographic primitive is used in blockchain to link blocks together and ensure integrity?

Keep studying — Security engineering