CompTIA Exam CAS-004 Topic 2 Question 70 Discussion

Actual exam question for CompTIA's CAS-004 exam

Question #: 70
Topic #: 2

During a recent breach, an attacker was able to get a user's login credentials by cracking a password that was retrieved via a stolen laptop. The attacker accessed the hashed passwords from the hard drive when it was connected to another device. Which of the following security measures could have helped prevent this account from being compromised?

AHost-based Intrusion Detection System

BEndpoint Detection and Response

CHost-based Firewall

DFull Disk Encryption

Show Suggested Answer

Suggested Answer: D

Full Disk Encryption ensures that the data on the laptop is encrypted at rest, preventing unauthorized access even if the device is stolen and its hard drive accessed externally. This aligns with CASP+ objective 3.5, which emphasizes implementing encryption to protect sensitive data against theft and compromise.

by Junita at Feb 08, 2025, 03:33 AM

Limited Time Offer

25%

Off

Get Premium CAS-004 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Virgie

2 months ago

I'm going with D) Full Disk Encryption. Encrypted hard drives are like digital Fort Knox - even if they get their hands on it, they ain't getting in!

upvoted 0 times

Audry

17 days ago

D) Full Disk Encryption would have made the stolen data useless to the attacker.

upvoted 0 times

...

Venita

25 days ago

C) Host-based Firewall could have blocked the attacker from accessing the hashed passwords.

upvoted 0 times

...

Chu

27 days ago

B) Endpoint Detection and Response could have detected the suspicious activity on the stolen laptop.

upvoted 0 times

...

Cherelle

1 months ago

A) Host-based Intrusion Detection could have alerted us to the unauthorized access.

upvoted 0 times

...

Maile

2 months ago

Ha, the attacker thought they were so smart, but D) Full Disk Encryption would have ruined their day. Gotta love that extra layer of security!

upvoted 0 times

Sherly

25 days ago

Ha, the attacker thought they were so smart, but D) Full Disk Encryption would have ruined their day. Gotta love that extra layer of security!

upvoted 0 times

...

Letha

26 days ago

D) Full Disk Encryption

upvoted 0 times

...

Daniel

27 days ago

C) Host-based Firewall

upvoted 0 times

...

Lauran

28 days ago

B) Endpoint Detection and Response

upvoted 0 times

...

Jamey

29 days ago

A) Host-based Intrusion Detection System

upvoted 0 times

...

Annalee

2 months ago

Wow, that's a tough one. I'd say B) Endpoint Detection and Response could have helped detect the suspicious activity, but D) Full Disk Encryption is the real MVP here.

upvoted 0 times