CompTIA Exam CAS-004 Topic 2 Question 72 Discussion

Actual exam question for CompTIA's CAS-004 exam

Question #: 72
Topic #: 2

A security analyst and a DevOps engineer are working together to address configuration drifts in highly scalable systems that are leading to increased vulnerability findings. Which of the following recommendations would be best to eliminate this issue?

AUsing a baseline configuration manager for deployment

BDeploying an immutable infrastructure through containers

CEliminating false positives from the vulnerability scans

DPerforming continuous audits of the patching status

Show Suggested Answer

Suggested Answer: B

Immutable infrastructure through containers ensures that the deployed systems remain consistent and resistant to drift. Any changes require rebuilding and redeploying containers, eliminating configuration inconsistencies. This aligns with CASP+ objective 2.2, which emphasizes implementing scalable, secure system configurations.

________________________________________

by An at Mar 19, 2025, 07:13 PM

Limited Time Offer

25%

Off

Get Premium CAS-004 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Vivan

8 days ago

Haha, eliminating false positives? Yeah, right, that's like trying to find a needle in a haystack.

upvoted 0 times

...

Vivienne

12 days ago

That makes sense, let's implement a baseline configuration manager to address this issue.

upvoted 0 times

...

Bambi

13 days ago

Hold on, what about continuous audits? Patching is crucial too, you know. This is a tough one.

upvoted 0 times

...

Samira

14 days ago

Exactly, it would ensure that all systems are configured correctly and any deviations can be easily identified and corrected.

upvoted 0 times

...

Belen

21 days ago

I agree, containers are the future. Baseline configuration management is just too much work.

upvoted 0 times

Mitzie

4 days ago

Security analyst: Baseline configuration management can be too time-consuming, containers seem like the way to go.

upvoted 0 times

...

Quentin

6 days ago

DevOps engineer: Agreed, containers would help eliminate configuration drifts and increase security.

upvoted 0 times

...

Buffy

18 days ago

Security analyst: We should consider deploying an immutable infrastructure through containers.

upvoted 0 times

...

Vivienne

25 days ago

I agree, having a baseline configuration manager would help maintain consistency and prevent configuration drifts.

upvoted 0 times

...

Dannie

29 days ago

Option B is the way to go! Immutable infrastructure is the key to maintaining consistency and reducing vulnerability.

upvoted 0 times

...

Samira

1 months ago

I think option A) Using a baseline configuration manager for deployment would be the best solution.

upvoted 0 times

...