A cloud service provider wants to offer its customers a way to isolate their workloads in a multi-tenant environment. The provider needs to ensure that each customer's virtual machines can only communicate with other VMs in the same customer's environment. Which technology should the provider use?

Use a traditional VPN to connect all customer VMs.

Deploy a network intrusion detection system (NIDS) to monitor traffic.

Implement microsegmentation using software-defined networking (SDN) policies.

Place all customer VMs on the same VLAN and use firewall rules.

Which statement best describes the primary security benefit of network segmentation?

It provides a direct, secure connection to remote users over the internet.

It eliminates the need for firewalls between different parts of the network.

It encrypts all data transmitted between network segments.

It limits the scope of a security breach by containing traffic within defined segments.

A company is deploying always-on VPN to all employees. The security team is concerned about the impact on the corporate network's bandwidth and the user experience. They want to ensure that the VPN does not degrade performance for cloud-based applications. Which configuration should they use?

Use full-tunnel mode to route all traffic through the VPN.

Disable the VPN for cloud-based applications.

Use a VPN concentrator with a high-speed connection.

Use split-tunnel mode to route only corporate traffic through the VPN.

What is a common use of API integration in a security operations center (SOC)?

To provide a graphical interface for network monitoring

To automatically block malicious IP addresses on a firewall when an alert is triggered

To replace the need for security analysts

To physically disconnect a server from the network

CompTIASecurityX (CASP+)

Domain 2Objective 4

Network Architecture CAS-005 Practice Questions (Page 3)

Part of the Security architecture domain, which accounts for 27% of the CAS-005 exam. CompTIA does not publish an official question count, but from its 165-minute exam (~65–110 total, ~18–30 in this domain), expect 3–4 from this objective — we provide 22 practice questions to prepare you well beyond it. (estimate)

22questions here

5free pages

5concepts

27%of the exam

Questions 11–15

11application · medium
A cloud service provider wants to offer its customers a way to isolate their workloads in a multi-tenant environment. The provider needs to ensure that each customer's virtual machines can only communicate with other VMs in the same customer's environment. Which technology should the provider use?
Select an answer first
12foundation · easy
A network administrator wants to isolate the guest Wi-Fi network from the internal corporate network to reduce the risk of malware spreading from guest devices. Which security architecture concept directly supports this goal?
Select an answer first
13foundation · easy
Which statement best describes the primary security benefit of network segmentation?
Select an answer first
14expert · hard
A company is deploying always-on VPN to all employees. The security team is concerned about the impact on the corporate network's bandwidth and the user experience. They want to ensure that the VPN does not degrade performance for cloud-based applications. Which configuration should they use?
Select an answer first
15foundation · easy
What is a common use of API integration in a security operations center (SOC)?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CAS-005

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CompTIA. “CAS-005” is a trademark of its owner, used for identification only.