A company is implementing microsegmentation in its data center. The security team wants to ensure that a compromised web server cannot be used to access the database server. Which microsegmentation approach is most effective?

Using a traditional network firewall to segment the web server and database server into different VLANs.

Encrypting all traffic between the web server and the database server.

Placing the web server and database server on the same subnet and using a host-based firewall on the database server.

Creating a distributed firewall policy that only allows the web server to communicate with the database server on the specific database port, and denies all other traffic between them.

Which statement best describes the core principle of zero trust architecture?

Trust is based on the user's role and group memberships.

Trust is granted once and then continuously verified for each access request.

Trust is established based on the network location of the user.

No implicit trust is granted; every access request must be verified.

A zero trust environment is being monitored. The security team wants to detect a potential account compromise where an attacker is using a valid user's credentials to access resources. Which continuous monitoring technique would be most effective for this specific scenario?

Analyzing user behavior analytics (UEBA) to identify anomalous access patterns, such as a user accessing resources at unusual times or from unusual locations.

Performing regular vulnerability scans on all servers to identify missing patches.

Monitoring the physical security of the data center to ensure no unauthorized individuals gain access.

Reviewing firewall logs for denied inbound connections from the internet.

A global company is implementing zero trust. They have offices in multiple countries and employees who work remotely. The IAM team is designing the authentication and authorization process. They want to ensure that a user's access is continuously verified, not just at the initial login. Which IAM approach best supports this requirement?

Requiring the user to use a hardware token for all authentication requests.

Implementing a conditional access policy that evaluates the user's risk score and device posture in real-time, and can prompt for step-up authentication or block access if the risk changes.

Using a session timeout policy that requires the user to re-authenticate after a period of inactivity.

Implementing a single sign-on (SSO) solution that authenticates the user once and provides a token for the entire session.

A company is implementing zero trust access control. They want to ensure that a user can only access the resources necessary for their current task, and that this access is revoked as soon as the task is complete. Which access control model best fits this requirement?

Mandatory access control (MAC), where access is based on security labels assigned to subjects and objects.

Discretionary access control (DAC), where the resource owner decides who can access the resource.

Role-based access control (RBAC), where access is granted based on the user's job title.

Attribute-based access control (ABAC), where access is granted based on a combination of attributes, including the user's role, the resource, and the current context.

CompTIASecurityX (CASP+)

Domain 2Objective 7

Zero Trust Concepts CAS-005 Practice Questions (Page 2)

Part of the Security architecture domain, which accounts for 27% of the CAS-005 exam. CompTIA does not publish an official question count, but from its 165-minute exam (~65–110 total, ~18–30 in this domain), expect 3–4 from this objective — we provide 13 practice questions to prepare you well beyond it. (estimate)

13questions here

3free pages

6concepts

27%of the exam

Questions 6–10

6application · medium
A company is implementing microsegmentation in its data center. The security team wants to ensure that a compromised web server cannot be used to access the database server. Which microsegmentation approach is most effective?
Select an answer first
7foundation · easy
Which statement best describes the core principle of zero trust architecture?
Select an answer first
8application · medium
A zero trust environment is being monitored. The security team wants to detect a potential account compromise where an attacker is using a valid user's credentials to access resources. Which continuous monitoring technique would be most effective for this specific scenario?
Select an answer first
9expert · hard
A global company is implementing zero trust. They have offices in multiple countries and employees who work remotely. The IAM team is designing the authentication and authorization process. They want to ensure that a user's access is continuously verified, not just at the initial login. Which IAM approach best supports this requirement?
Select an answer first
10application · medium
A company is implementing zero trust access control. They want to ensure that a user can only access the resources necessary for their current task, and that this access is revoked as soon as the task is complete. Which access control model best fits this requirement?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CAS-005

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CompTIA. “CAS-005” is a trademark of its owner, used for identification only.