Comptia Advanced Security Practitioner
(CASP+) Examination Questions And
Correct Answers (Verified Answers) Plus
Rationales 2026 Q&A | Instant
Download Pdf
Question 1
Which control best ensures that data remains confidential when stored in an
untrusted environment?
A. Hashing
B. Encryption at rest
C. Tokenization
D. Data masking
Correct Answer: B
Rationale: Encryption at rest protects stored data by converting plaintext into
ciphertext using cryptographic algorithms and keys. Even if storage media is
compromised, the data remains unreadable without the decryption key, making
it the strongest confidentiality control among the options.
Question 2
A company wants to reduce lateral movement in its network. Which architecture
is MOST effective?
,A. Flat network design
B. VLAN segmentation only
C. Zero Trust architecture
D. NAT implementation
Correct Answer: C
Rationale: Zero Trust architecture enforces strict identity verification and micro-
segmentation, ensuring that no user or device is inherently trusted. This
significantly limits lateral movement by requiring continuous authentication and
authorization for every access request.
Question 3
Which type of attack is MOST associated with credential reuse across multiple
systems?
A. Brute force
B. Credential stuffing
C. Rainbow table attack
D. Pass-the-hash
Correct Answer: B
Rationale: Credential stuffing uses previously leaked username/password
combinations to attempt logins across multiple platforms. It relies on users
reusing passwords and automated tools to test large credential sets.
Question 4
Which security control BEST detects anomalous behavior in user activity?
A. IDS signature-based detection
B. SIEM correlation rules
C. Antivirus scanning
D. Firewall ACLs
,Correct Answer: B
Rationale: SIEM systems aggregate logs and apply correlation rules and
behavioral analytics to identify anomalies in user behavior, making them ideal
for detecting unusual activity patterns compared to point solutions like IDS or
firewalls.
Question 5
What is the PRIMARY purpose of a hardware security module (HSM)?
A. Malware detection
B. Secure key storage and cryptographic operations
C. Network segmentation
D. Packet inspection
Correct Answer: C
Rationale: HSMs are designed to securely generate, store, and manage
cryptographic keys within tamper-resistant hardware, ensuring keys are never
exposed in plaintext outside the secure boundary.
Question 6
Which risk response strategy eliminates the risk entirely?
A. Mitigation
B. Acceptance
C. Transfer
D. Avoidance
Correct Answer: D
Rationale: Risk avoidance removes the risk by discontinuing the activity that
introduces it. Unlike mitigation or transfer, avoidance ensures the risk scenario
no longer exists within the operational environment.
, Question 7
What is the MAIN advantage of implementing microservices security?
A. Centralized authentication only
B. Reduced encryption overhead
C. Granular service-level isolation
D. Eliminates need for APIs
Correct Answer: D
Rationale: Microservices security allows each service to be isolated and
independently secured, reducing blast radius and improving control over inter-
service communication and authorization boundaries.
Question 8
Which cryptographic attack targets weak initialization vectors?
A. Collision attack
B. Replay attack
C. IV reuse attack
D. Birthday attack
Correct Answer: A
Rationale: Collision attacks exploit weaknesses in hash functions where two
different inputs produce the same output. Weak IVs can lead to predictable
encryption outputs that facilitate such collisions.
Question 9
Which control BEST protects against insider threats?
(CASP+) Examination Questions And
Correct Answers (Verified Answers) Plus
Rationales 2026 Q&A | Instant
Download Pdf
Question 1
Which control best ensures that data remains confidential when stored in an
untrusted environment?
A. Hashing
B. Encryption at rest
C. Tokenization
D. Data masking
Correct Answer: B
Rationale: Encryption at rest protects stored data by converting plaintext into
ciphertext using cryptographic algorithms and keys. Even if storage media is
compromised, the data remains unreadable without the decryption key, making
it the strongest confidentiality control among the options.
Question 2
A company wants to reduce lateral movement in its network. Which architecture
is MOST effective?
,A. Flat network design
B. VLAN segmentation only
C. Zero Trust architecture
D. NAT implementation
Correct Answer: C
Rationale: Zero Trust architecture enforces strict identity verification and micro-
segmentation, ensuring that no user or device is inherently trusted. This
significantly limits lateral movement by requiring continuous authentication and
authorization for every access request.
Question 3
Which type of attack is MOST associated with credential reuse across multiple
systems?
A. Brute force
B. Credential stuffing
C. Rainbow table attack
D. Pass-the-hash
Correct Answer: B
Rationale: Credential stuffing uses previously leaked username/password
combinations to attempt logins across multiple platforms. It relies on users
reusing passwords and automated tools to test large credential sets.
Question 4
Which security control BEST detects anomalous behavior in user activity?
A. IDS signature-based detection
B. SIEM correlation rules
C. Antivirus scanning
D. Firewall ACLs
,Correct Answer: B
Rationale: SIEM systems aggregate logs and apply correlation rules and
behavioral analytics to identify anomalies in user behavior, making them ideal
for detecting unusual activity patterns compared to point solutions like IDS or
firewalls.
Question 5
What is the PRIMARY purpose of a hardware security module (HSM)?
A. Malware detection
B. Secure key storage and cryptographic operations
C. Network segmentation
D. Packet inspection
Correct Answer: C
Rationale: HSMs are designed to securely generate, store, and manage
cryptographic keys within tamper-resistant hardware, ensuring keys are never
exposed in plaintext outside the secure boundary.
Question 6
Which risk response strategy eliminates the risk entirely?
A. Mitigation
B. Acceptance
C. Transfer
D. Avoidance
Correct Answer: D
Rationale: Risk avoidance removes the risk by discontinuing the activity that
introduces it. Unlike mitigation or transfer, avoidance ensures the risk scenario
no longer exists within the operational environment.
, Question 7
What is the MAIN advantage of implementing microservices security?
A. Centralized authentication only
B. Reduced encryption overhead
C. Granular service-level isolation
D. Eliminates need for APIs
Correct Answer: D
Rationale: Microservices security allows each service to be isolated and
independently secured, reducing blast radius and improving control over inter-
service communication and authorization boundaries.
Question 8
Which cryptographic attack targets weak initialization vectors?
A. Collision attack
B. Replay attack
C. IV reuse attack
D. Birthday attack
Correct Answer: A
Rationale: Collision attacks exploit weaknesses in hash functions where two
different inputs produce the same output. Weak IVs can lead to predictable
encryption outputs that facilitate such collisions.
Question 9
Which control BEST protects against insider threats?
