CompTIA Exam CAS-004 Topic 2 Question 72 Discussion

Actual exam question for CompTIA's CAS-004 exam

Question #: 72
Topic #: 2

A security analyst and a DevOps engineer are working together to address configuration drifts in highly scalable systems that are leading to increased vulnerability findings. Which of the following recommendations would be best to eliminate this issue?

AUsing a baseline configuration manager for deployment

BDeploying an immutable infrastructure through containers

CEliminating false positives from the vulnerability scans

DPerforming continuous audits of the patching status

Show Suggested Answer

Suggested Answer: B

Immutable infrastructure through containers ensures that the deployed systems remain consistent and resistant to drift. Any changes require rebuilding and redeploying containers, eliminating configuration inconsistencies. This aligns with CASP+ objective 2.2, which emphasizes implementing scalable, secure system configurations.

________________________________________

by An at Mar 19, 2025, 07:13 PM

Limited Time Offer

25%

Off

Get Premium CAS-004 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Vivan

2 months ago

Haha, eliminating false positives? Yeah, right, that's like trying to find a needle in a haystack.

upvoted 0 times

Rebbecca

2 days ago

DevOps engineer: Let's give it a shot and see if it improves our vulnerability findings.

upvoted 0 times

...

Maryln

7 days ago

Security analyst: It's worth a try to address the configuration drifts.

upvoted 0 times

...

Veronika

12 days ago

DevOps engineer: I agree, that could help us maintain consistency.

upvoted 0 times

...

Herman

24 days ago

Security analyst: We should consider using a baseline configuration manager for deployment.

upvoted 0 times

...

Gertude

25 days ago

DevOps engineer: Or we could deploy an immutable infrastructure through containers.

upvoted 0 times

...

Blair

1 months ago

Security analyst: We could use a baseline configuration manager for deployment.

upvoted 0 times

...

Vivienne

2 months ago

That makes sense, let's implement a baseline configuration manager to address this issue.

upvoted 0 times

...

Bambi

2 months ago

Hold on, what about continuous audits? Patching is crucial too, you know. This is a tough one.

upvoted 0 times

...

Samira

2 months ago

Exactly, it would ensure that all systems are configured correctly and any deviations can be easily identified and corrected.

upvoted 0 times

...

Belen

2 months ago

I agree, containers are the future. Baseline configuration management is just too much work.

upvoted 0 times

Princess

21 days ago

B: Let's start working on implementing containers in our system to improve security.

upvoted 0 times

...

Slyvia

1 months ago

A: Exactly, it will help us address the vulnerability findings more effectively.

upvoted 0 times

...

Earleen

1 months ago

B: I agree, containers make it easier to maintain consistency and reduce configuration drift.

upvoted 0 times

...

Wynell

2 months ago

A: We should definitely go with option B and deploy an immutable infrastructure through containers.

upvoted 0 times

...

Mitzie

2 months ago

Security analyst: Baseline configuration management can be too time-consuming, containers seem like the way to go.

upvoted 0 times

...

Quentin

2 months ago

DevOps engineer: Agreed, containers would help eliminate configuration drifts and increase security.

upvoted 0 times

...

Buffy

2 months ago

Security analyst: We should consider deploying an immutable infrastructure through containers.

upvoted 0 times

...

Vivienne

2 months ago

I agree, having a baseline configuration manager would help maintain consistency and prevent configuration drifts.

upvoted 0 times

...

Dannie

3 months ago

Option B is the way to go! Immutable infrastructure is the key to maintaining consistency and reducing vulnerability.

upvoted 0 times

Corrinne

1 months ago

A: It also makes it easier to roll back changes if needed, which is crucial for security purposes.

upvoted 0 times

...

Filiberto

1 months ago

B: Absolutely, it helps in maintaining a stable environment and reduces the chances of configuration drifts.

upvoted 0 times

...

Cristal

1 months ago

A: I agree, using containers for immutable infrastructure is a great way to ensure consistency.

upvoted 0 times

...

Samira

3 months ago

I think option A) Using a baseline configuration manager for deployment would be the best solution.

upvoted 0 times

...