Download Full Version CAS-004 CompTIA Exam

In this scenario, the organization is looking to deploy a containerized application in the cloud and wants the infrastructure to automatically scale without handling patch management. A Platform as a Service (PaaS) model is the best fit because it allows developers to focus on the application and its deployment, while the cloud provider manages the underlying infrastructure, including patching and scaling. PaaS supports container orchestration, enabling automated scaling based on demand, and offloads most operational responsibilities to the provider. This is in contrast to Infrastructure as a Service (IaaS), which requires more direct management of the infrastructure, including patching. CASP+ highlights PaaS as a service model that minimizes operational overhead for security operations teams.

References:

CASP+ CAS-004 Exam Objectives: Domain 3.0 – Enterprise Security Architecture (Cloud Service Models)

CompTIA CASP+ Study Guide: Cloud Computing and PaaS Benefits

Step by Step Explanation:

RPO (Recovery Point Objective): Specifies the maximum acceptable amount of data loss measured in time. If data loss of more than one hour is unacceptable, the RPO should be set to less than or equal to one hour.

RTO (Recovery Time Objective): Refers to the acceptable duration of system downtime, which is not relevant to the question.

The BCP, DRP, and SLA do not directly address data loss.

Signed applications ensure the integrity of the application by verifying that the source code has not been tampered with. Digital signatures provide a cryptographic guarantee that the software is exactly as the developer released it.

Passwordless authentication is an authentication method that does not require the user to enter a password. Instead, it relies on alternative forms of verification, such as biometric readers (fingerprint or facial recognition), proximity badge entry systems, and hardware security tokens. These technologies provide a means to authenticate users with higher assurance levels and would benefit the most from the use of the mentioned devices and methods.