SkillTestPro | CompTIA CASP+ Practice Test 3

CompTIA CASP+ Practice Test 3

CompTIA CASP+ Exam Practice Test

1 / 10

A zero-day exploit targets a web server. Which mitigation should you deploy to limit damage until a patch is available?

Web Application Firewall (WAF) with custom rules

Static IP filtering

Full server reboot

Open port scanning

Unrestricted user access

2 / 10

A SCADA system connects to Azure IoT Hub. Which security practice protects against unauthorized device access?

Open port 443 access

Static IP routing

Unencrypted MQTT

Device authentication with symmetric keys and DPS

Shared access signatures

3 / 10

A retail chain must align with PCI DSS and assess cloud provider controls. Which Azure report validates Microsoft’s compliance?

Azure AD Audit Logs

Azure Service Organization Control (SOC) 1 Report

Azure Monitor Performance Data

Azure Resource Usage Report

Azure Traffic Analytics

4 / 10

A PKI system uses a 1024-bit RSA key, now considered weak. Which key length should you upgrade to for secure certificate issuance?

2048-bit RSA

512-bit RSA

128-bit AES

1024-bit DSA

256-bit MD5

5 / 10

An insider threat modifies critical files undetected. Which command audits file changes on a Linux server?

ls -lt /etc/important

netstat -tuln

whoami

auditctl -w /etc/important -p wa -k file-watch

ps aux | grep modify

6 / 10

A firm deploys a serverless application in AWS Lambda. Which control mitigates risks from untrusted code execution?

Public subnet placement

Unrestricted API Gateway

IAM roles with least privilege for Lambda functions

Shared execution roles

Open S3 bucket access

7 / 10

A company faces a new regulation requiring data breach notifications within 72 hours. Which Azure feature supports rapid incident reporting?

Azure Monitor Metrics

Azure Policy Templates

Azure Key Vault Logs

Azure Resource Manager

Azure Sentinel with automated playbooks

8 / 10

A legacy app uses 3DES for encryption, which is vulnerable. Which modern algorithm should you replace it with?

RSA-2048

AES-256

DES-X

Blowfish

MD5

9 / 10

A SOC identifies a data exfiltration attempt via DNS tunneling. Which command detects suspicious DNS traffic on a Linux server?

netstat -an | grep 53

who -u

ls -l /var/log

tcpdump -i eth0 port 53 -n

dmesg | grep dns

10 / 10

A company migrates to a microservices architecture in Azure. Which security control ensures isolation between services?

Azure Network Security Groups (NSGs) with service-specific rules

Azure Load Balancer with public IPs

Static routing tables

Open subnet access

Shared security groups

Your score is

The average score is 0%