CompTIA Updated CAS-004 Exam Questions and Answers by morgan

Software composition analysis (SCA) is the most effective method to mitigate third-party risks in a software supply chain. SCA tools analyze the open-source and third-party components used in software development to identify known vulnerabilities, outdated dependencies, or licensing issues. By integrating SCA into the development environment, the company can proactively address risks related to external libraries or codebases that may introduce vulnerabilities into the software supply chain. CASP+ emphasizes the importance of securing the supply chain, particularly by identifying and addressing risks introduced by third-party software components.

References:

CASP+ CAS-004 Exam Objectives: Domain 3.0 – Enterprise Security Architecture (Third-Party Risk Management)

CompTIA CASP+ Study Guide: Securing Software Supply Chains with SCA

A Virtual Desktop Infrastructure (VDI) solution meets all the listed requirements: reducing patch management, using standard configurations, allowing for custom resource configurations, and providing access from multiple device types. VDI allows centralized management of desktop environments, where patches and updates can be applied once and distributed across all virtual desktops. It also supports flexible resource configurations and secure remote access from various devices. CASP+ highlights VDI as a solution for centralized, secure desktop management that meets modern enterprise needs for mobility and security.

References:

CASP+ CAS-004 Exam Objectives: Domain 3.0 – Enterprise Security Architecture (VDI for Secure Remote Desktop Management)

CompTIA CASP+ Study Guide: Virtual Desktop Infrastructure for Centralized Management and Security

Based on the given certificate properties:

SuperTrust RSA 2018 is an intermediate certificate authority (CA) because it is issued by BudgetCert Global Root CA, which is the top-level certificate authority.

BudgetCert is the top-level CA (root CA) in this public key infrastructure (PKI) hierarchy, as it issues certificates to SuperTrust RSA 2018 and has no issuer of its own.

Therefore, SuperTrust RSA 2018 is the intermediate CA, and BudgetCert is the top-level (root) CA in this PKI chain of trust. The www.budgetcert.com certificate is the leaf or end-entity certificate, which is used for the website itself.

References:

CASP+ CAS-004 Exam Objectives: Domain 3.0 – Enterprise Security Architecture (PKI and Certificate Chains of Trust)

CompTIA CASP+ Study Guide: PKI Hierarchy and Certificate Trust Models

A Hardware Security Module (HSM) provides the best solution for securely backing up MFA seeds in a central, offline location with minimal management overhead. HSMs are specialized hardware devices designed for cryptographic key management, including storing sensitive data like MFA seeds securely. HSMs offer high levels of protection against tampering and provide offline security, making them an ideal choice for backing up cryptographic materials. CASP+ recognizes HSMs as critical components for managing and securing cryptographic keys in centralized, secure environments.

References:

CASP+ CAS-004 Exam Objectives: Domain 3.0 – Enterprise Security Architecture (HSM and Secure Key Management)

CompTIA CASP+ Study Guide: Secure Backup and Key Management with HSM