CompTIA CASP+ SecurityX CAS-005 - All Domains Advanced Security Architecture Engineering

By Jordan Blake · Updated May 25, 2026

Questions25
Passing Score75%
Format100% Multiple Choice
Sessions Logged2,696
Your progressLog in / Register to track times taken, best score, questions mastered, and coverage on this quiz.
Rating
4.7 (26)

Topics covered

This quiz

Uncategorized25 (100%)

Uncategorized25 questions

Browse more · Report this quiz

Question catalog for this preview

Catalog listing of the 5 preview questions for this quiz.

Question 1

A company's development team wants to integrate security into their CI/CD pipeline. A security engineer proposes running SAST and DAST tools automatically. What is the difference?

Answer choices

  • A. SAST tests applications in production; DAST tests source code

  • B. SAST (Static Application Security Testing) analyzes source code without running it; DAST (Dynamic Application Security Testing) tests the running application by sending attack payloads

  • C. SAST is for mobile apps; DAST is for web apps

  • D. They test the same things with different tools

Question 2

A security engineer is implementing TLS for an internal API. They want to ensure that only the server's certificate is trusted (not any CA certificate), preventing man-in-the-middle attacks even with valid CA-signed certificates. What technique should be used?

Answer choices

  • A. Certificate revocation (CRL/OCSP)

  • B. Certificate pinning

  • C. Extended Validation (EV) certificates

  • D. Mutual TLS (mTLS)

Question 3

An organization wants to measure the effectiveness of their security program. Which metric would BEST indicate the organization's ability to detect and respond to threats?

Answer choices

  • A. Number of security policies documented

  • B. Percentage of assets with antivirus installed

  • C. Mean Time to Detect (MTTD) and Mean Time to Respond (MTTR) tracked over time

  • D. Number of security training completions

Question 4

A CISO is designing a supply chain security program after a major vendor compromise. Which control would MOST effectively reduce supply chain risk?

Answer choices

  • A. Require vendors to sign NDAs

  • B. Conduct thorough vendor security assessments (TPRM), require SOC 2/ISO 27001 attestations, implement software composition analysis (SCA) for third-party code, and monitor vendor access

  • C. Use only domestic vendors

  • D. Limit vendor communication via email

Question 5

An enterprise security architect is designing a solution to ensure that privileged access to cloud infrastructure is temporary, audited, and eliminates permanent credentials. Which capability achieves this?

Answer choices

  • A. Long-lived service account credentials stored in a vault

  • B. Just-in-Time (JIT) privileged access management (PAM) with time-limited elevation and full session recording

  • C. Shared admin accounts stored in a password manager

  • D. VPN access for all administrators