CompTIA Exam CAS-004 Topic 2 Question 72 Discussion

Actual exam question for CompTIA's CAS-004 exam

Question #: 72
Topic #: 2

A security analyst and a DevOps engineer are working together to address configuration drifts in highly scalable systems that are leading to increased vulnerability findings. Which of the following recommendations would be best to eliminate this issue?

AUsing a baseline configuration manager for deployment

BDeploying an immutable infrastructure through containers

CEliminating false positives from the vulnerability scans

DPerforming continuous audits of the patching status

Show Suggested Answer

Suggested Answer: B

Immutable infrastructure through containers ensures that the deployed systems remain consistent and resistant to drift. Any changes require rebuilding and redeploying containers, eliminating configuration inconsistencies. This aligns with CASP+ objective 2.2, which emphasizes implementing scalable, secure system configurations.

________________________________________

by An at Mar 19, 2025, 07:13 PM

Limited Time Offer

25%

Off

Get Premium CAS-004 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Vivienne

3 days ago

That makes sense, let's implement a baseline configuration manager to address this issue.

upvoted 0 times

...

Bambi

4 days ago

Hold on, what about continuous audits? Patching is crucial too, you know. This is a tough one.

upvoted 0 times

...

Samira

5 days ago

Exactly, it would ensure that all systems are configured correctly and any deviations can be easily identified and corrected.

upvoted 0 times

...

Belen

12 days ago

I agree, containers are the future. Baseline configuration management is just too much work.

upvoted 0 times

Buffy

9 days ago

Security analyst: We should consider deploying an immutable infrastructure through containers.

upvoted 0 times

...

Vivienne

16 days ago

I agree, having a baseline configuration manager would help maintain consistency and prevent configuration drifts.

upvoted 0 times

...

Dannie

20 days ago

Option B is the way to go! Immutable infrastructure is the key to maintaining consistency and reducing vulnerability.

upvoted 0 times

...

Samira

25 days ago

I think option A) Using a baseline configuration manager for deployment would be the best solution.

upvoted 0 times

...