What is a key characteristic of an always-on VPN?

It establishes a VPN connection only when the user initiates it.

It only works on wired connections.

It maintains a persistent, automatic VPN connection whenever the device is connected to the network.

It uses a public IP address to connect to the internet.

A large enterprise wants to automate the response to security incidents by integrating its SIEM with its network firewall. The goal is to automatically block malicious IP addresses detected by the SIEM. Which approach should they use?

Configure the SIEM to send email alerts to the network team for manual review.

Use the firewall's web interface to manually add blocked IP addresses.

Utilize the firewall's API to programmatically update security policies based on SIEM alerts.

Develop a custom script that logs into the firewall and changes rules via SSH.

A company is implementing a remote access solution for its employees. The security team wants to ensure that all traffic from remote devices is encrypted and that the devices are subject to corporate security policies, such as malware scanning. Which solution should they choose?

An always-on VPN with full-tunnel mode.

A clientless VPN that provides access to web applications only.

A split-tunnel VPN that only routes traffic to internal resources.

A traditional VPN that employees connect to manually.

A company has remote employees who need to access internal resources securely from various locations, including public Wi-Fi. The security team wants to ensure that all traffic from these employees is encrypted and that they can access internal resources as if they were on the corporate network. Which solution should they implement?

Deploy an always-on VPN that automatically establishes a secure tunnel whenever the device is connected to the internet.

Set up a traditional VPN that requires employees to manually connect each time they need access.

Implement a split-tunnel VPN that only routes traffic to internal resources through the tunnel.

Use a web proxy that only encrypts browser traffic.

CompTIASecurityX (CASP+)

Domain 2Objective 4

Network Architecture CAS-005 Practice Questions (Page 1)

Part of the Security architecture domain, which accounts for 27% of the CAS-005 exam. CompTIA does not publish an official question count, but from its 165-minute exam (~65–110 total, ~18–30 in this domain), expect 3–4 from this objective — we provide 22 practice questions to prepare you well beyond it. (estimate)

22questions here

5free pages

5concepts

27%of the exam

Questions 1–5

1foundation · easy
What is a key characteristic of an always-on VPN?
Select an answer first
2application · medium
A large enterprise wants to automate the response to security incidents by integrating its SIEM with its network firewall. The goal is to automatically block malicious IP addresses detected by the SIEM. Which approach should they use?
Select an answer first
3application · medium
A company is implementing a remote access solution for its employees. The security team wants to ensure that all traffic from remote devices is encrypted and that the devices are subject to corporate security policies, such as malware scanning. Which solution should they choose?
Select an answer first
4application · medium
A company has remote employees who need to access internal resources securely from various locations, including public Wi-Fi. The security team wants to ensure that all traffic from these employees is encrypted and that they can access internal resources as if they were on the corporate network. Which solution should they implement?
Select an answer first
5foundation · easy
Which component is essential for a VPN to secure data transmission?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CAS-005

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CompTIA. “CAS-005” is a trademark of its owner, used for identification only.

Network Architecture CAS-005 Practice Questions (Page 1)

Questions 1–5

What is a key characteristic of an always-on VPN?

A large enterprise wants to automate the response to security incidents by integrating its SIEM with its network firewall. The goal is to automatically block malicious IP addresses detected by the SIEM. Which approach should they use?

A company is implementing a remote access solution for its employees. The security team wants to ensure that all traffic from remote devices is encrypted and that the devices are subject to corporate security policies, such as malware scanning. Which solution should they choose?

Which component is essential for a VPN to secure data transmission?

Keep studying — Security architecture