A law firm requires that all partner laptops have a secure connection to the firm's network at all times, even when they are not actively using firm resources. The goal is to prevent data leakage and ensure that any internet traffic from the laptop is subject to corporate security policies. Which implementation strategy best meets this requirement?

Configure a traditional VPN that users must manually start when they need to access firm resources.

Use a split-tunnel VPN that only routes traffic to firm resources through the tunnel.

Implement a clientless VPN that provides access to specific web applications only.

Deploy an always-on VPN with full-tunnel mode, routing all traffic through the corporate gateway.

How can APIs be used to enhance network security operations?

By providing a backup power supply for network equipment

By automating the configuration and enforcement of security policies across network devices

By replacing the need for encryption on network traffic

By physically isolating network segments

A financial services firm is deploying a new payment processing application that must comply with PCI DSS. The application consists of a web front end, an application server, and a database. The security team wants to limit lateral movement if the web server is compromised, while also ensuring that the application server can only communicate with the database on the required port. Which approach best meets these requirements?

Create separate VLANs for each tier and implement microsegmentation policies that allow only the necessary traffic between specific workloads.

Deploy a VPN between the web server and the database to encrypt traffic and assume that encryption alone provides sufficient isolation.

Use a single VLAN with an intrusion prevention system (IPS) inline between the tiers to monitor and block malicious traffic.

Place all three tiers in the same VLAN and use host-based firewalls on each server to restrict traffic.

What is the primary purpose of microsegmentation in a data center network?

To provide a backup connection for remote users

To isolate workloads and enforce granular security policies between them

To encrypt all east-west traffic between workloads

To reduce the number of physical switches required

CompTIASecurityX (CASP+)

Domain 2Objective 4

Network Architecture CAS-005 Practice Questions (Page 4)

Part of the Security architecture domain, which accounts for 27% of the CAS-005 exam. CompTIA does not publish an official question count, but from its 165-minute exam (~65–110 total, ~18–30 in this domain), expect 3–4 from this objective — we provide 22 practice questions to prepare you well beyond it. (estimate)

22questions here

5free pages

5concepts

27%of the exam

Questions 16–20

16foundation · easy
A security architect wants to apply security policies to individual workloads within a single subnet, rather than to the entire subnet. Which concept best describes this approach?
Select an answer first
17application · medium
A law firm requires that all partner laptops have a secure connection to the firm's network at all times, even when they are not actively using firm resources. The goal is to prevent data leakage and ensure that any internet traffic from the laptop is subject to corporate security policies. Which implementation strategy best meets this requirement?
Select an answer first
18foundation · easy
How can APIs be used to enhance network security operations?
Select an answer first
19application · medium
A financial services firm is deploying a new payment processing application that must comply with PCI DSS. The application consists of a web front end, an application server, and a database. The security team wants to limit lateral movement if the web server is compromised, while also ensuring that the application server can only communicate with the database on the required port. Which approach best meets these requirements?
Select an answer first
20foundation · easy
What is the primary purpose of microsegmentation in a data center network?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CAS-005

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CompTIA. “CAS-005” is a trademark of its owner, used for identification only.

Network Architecture CAS-005 Practice Questions (Page 4)

Questions 16–20

A security architect wants to apply security policies to individual workloads within a single subnet, rather than to the entire subnet. Which concept best describes this approach?

How can APIs be used to enhance network security operations?

What is the primary purpose of microsegmentation in a data center network?

Keep studying — Security architecture