CompTIA CASP+ (Advanced Security Practitioner) Exam Guide
The **CASP+** is CompTIA's advanced technical certification for senior security architects and engineers. Unlike CISSP (management focused), CASP+ remains technical and hands-on.
Which security principle focuses on making a system more resilient by removing unnecessary services and accounts?
Answer : Hardening.
Reduces the system's overall attack surface to minimize potential entry points.
In a secure architecture, what is a 'DMZ'?
Answer : An isolated buffer zone containing internet-facing services like web servers.
Protects the internal network from direct attacks targeting public services.
Which technology segments a physical network into multiple isolated logical networks?
Answer : VLAN (Virtual Local Area Network).
Enhanced security through traffic isolation between user groups or departments.
What is 'Sandboxing'?
Answer : Running suspicious programs or files in an isolated environment to analyze their behavior safely.
Prevents potential malware infections from spreading to the host system.
Which type of encryption utilizes a key pair (public and private)?
Answer : Asymmetric encryption (PKI).
Essential for digital signatures and secure symmetric key exchanges.
Related Certifications