Skip to exam content
← All Exams
Techclick Infosec

CompTIA SecurityX CAS-005 Practice Test (formerly CASP+)

Senior security architecture · engineering · GRC · ops

120 scenario questions · 180 min · 70% Techclick practice target

120
Questions
180
Minutes
70%
Techclick Practice Target

⚠️ Exam Rules

  • Once started, the timer cannot be paused
  • You can navigate freely — use Previous or the Navigator panel to revisit any question
  • Tab-switching triggers warnings (3 strikes = auto-submit)
  • Right-click and copy disabled during exam
  • If you fail, retry — questions and options reshuffle
Powered by Techclick Infosec Pvt Ltd

CAS-005 practice test: what's covered

Questions in this Techclick bank120
Timer180 min
Techclick practice target70%
Official exam codeCAS-005

Free CAS-005 sample questions

  1. When a residual risk exceeds the organizational risk appetite, which of the following actions are considered valid formal risk treatment strategies?

    • A. Accept the risk with formal sign-off from authorized executive leadership
    • B. Mitigate the risk by implementing additional security controls
    • C. Silently ignore the risk if it falls below the reporting threshold
    • D. Hide the risk from external auditors to prevent compliance penalties
    Show answer

    Correct: A and B. Acceptance requires executive sign-off, and mitigation involves new controls. These are valid treatments. Silently ignoring or hiding risks are unacceptable practices that violate governance frameworks and compliance mandates, leaving the organization exposed without formal tracking.

  2. Privacy by Design’s key principles include:

    • A. Encryption only
    • B. Proactive not reactive, privacy as the default, embedded into design, end-to-end security, visibility/transparency, respect for user privacy, full lifecycle protection
    • C. Just consent
    • D. None configuration
    Show answer

    Correct: B. Ann Cavoukian’s 7 principles. GDPR / DPDP / CCPA all align. Always run DPIAs on high-risk processing.

  3. Geo-fencing data residency requirements are typically met by:

    • A. Anywhere
    • B. Pin cloud workloads to specific regions, restrict cross-border data flows via network + IAM, use sovereign cloud where required
    • C. Public internet
    • D. Any region
    Show answer

    Correct: B. Sovereign cloud (Microsoft Cloud for Sovereignty, AWS Sovereign Cloud) is the strongest answer for some jurisdictions. Always check both legal + technical enforcement.

  4. Zero Trust Architecture explicit principle:

    • A. Trust LAN
    • B. Verify explicitly + least privilege + assume breach — every access decision evaluates identity + device + context
    • C. VPN configuration
    • D. Trust insiders
    Show answer

    Correct: B. NIST 800-207. Identity-aware proxy (BeyondCorp / Cloudflare Access / ZPA) replaces flat-network VPN; segmentation at workload identity level.

  5. SASE (Secure Access Service Edge) combines:

    • A. Just VPN
    • B. Cloud-delivered networking (SD-WAN) + security (SWG, CASB, ZTNA, FWaaS) — single converged edge
    • C. Just FW configuration
    • D. Just CASB
    Show answer

    Correct: B. Zscaler / Cato / Cisco+, Palo Alto Prisma SASE / Cloudflare One. Replaces hub-and-spoke MPLS / VPN appliance architecture.

Last updated:

CAS-005 practice test FAQ

Is this CAS-005 practice test free?

Yes. You can start, finish and score it for free, and download the Techclick practice certificate.

How many questions are in the Techclick CAS-005 practice test?

This bank has 120 original scenario-based questions with a 180-minute timer and a 70% Techclick practice target.

What is the official exam code and format?

The exam code is CAS-005. CompTIA SecurityX is the new name of CASP+ (CompTIA Advanced Security Practitioner).

Are these real CAS-005 exam questions or dumps?

No. They are original practice questions written by Techclick. This is not the vendor's official exam and not leaked dumps.

Do I get a certificate?

Score 70% or higher to get a Techclick practice certificate and LinkedIn badge. It is not an official CompTIA certification.

What should I take after CAS-005?

Related practice tests: CompTIA A+ 220-1101 / 220-1102, CompTIA CLO-002, CompTIA CV0-004, CySA+ CS0-003, CompTIA A+ DA0-001, CompTIA DY0-001 (linked below).

Techclick Infosec
TECHCLICK INFOSEC
CYBERSECURITY · PRACTICE ASSESSMENT
🎓
PRACTICE ASSESSMENT
CompTIA SecurityX
Senior security architecture · engineering · GRC · ops
AWARDED TO
{NAME}
SCORE
0%
DATE
--
TC-CAS-005-XXX
Practice certificate · not independently verified · Techclick Infosec Pvt Ltd · +91 92772 29456