2026年のCAS-001試験は出題範囲が広く、十分な準備なしに挑むにはハードルの高い試験です。PassTestが提供するCompTIA Advanced Security Practitioner対策問題集495問を繰り返し解くことで、出題傾向をつかみ、苦手分野を着実に克服できます。

CompTIA CAS-001 試験概要:

CompTIA CAS-001 試験シラバストピック:

CompTIA Advanced Security Practitionerの疑問にお答えします

CompTIA Advanced Security Practitioner 認定 CAS-001 試験問題：

問題 #1

A small company has a network with 37 workstations, 3 printers, a 48 port switch, an enterprise class router, and a firewall at the boundary to the ISP. The workstations have the latest patches and all have up-to-date anti-virus software. User authentication is a two-factor system with fingerprint scanners and passwords. Sensitive data on each workstation is encrypted. The network is configured to use IPv4 and is a standard Ethernet network. The network also has a captive portal based wireless hot-spot to accommodate visitors. Which of the following is a problem with the security posture of this company?

A. Insufficient user authentication controls are implemented
B. No transport security controls are implemented
C. No effective controls in place
D. IPv6 is not incorporated in the network

問題 #2

The Chief Executive Officer (CEO) of a corporation purchased the latest mobile device and wants to connect it to the internal network. The Chief Information Security Officer (CISO) was told to research and recommend how to secure this device.
Which of the following should be implemented, keeping in mind that the CEO has stated that this access is required?

A. Accept and Transfer
B. Mitigate and Transfer
C. Avoid and Mitigate
D. Transfer and Avoid

問題 #3

Which of the following authentication types is used primarily to authenticate users through the use of tickets?

A. RADIUS
B. LDAP
C. Kerberos
D. TACACS+

問題 #4

As part of the testing phase in the SDLC, a software developer wants to verify that an application is properly handling user error exceptions. Which of the following is the BEST tool or process for the developer use?

A. HTTP interceptor
B. Vulnerability assessment
C. SRTM review
D. Fuzzer

問題 #5

Ann, a Physical Security Manager, is ready to replace all 50 analog surveillance cameras with IP cameras with built-in web management. Ann has several security guard desks on different networks that must be able to view the cameras without unauthorized people viewing the video as well. The selected IP camera vendor does not have the ability to authenticate users at the camera level. Which of the following should Ann suggest to BEST secure this environment?

A. Create an IP camera network and deploy a proxy to authenticate users prior to accessing the cameras.
B. Create an IP camera network and restrict access to cameras from a single management host.
C. Create an IP camera network and only allow SSL access to the cameras.
D. Create an IP camera network and deploy NIPS to prevent unauthorized access.

解説：