CompTIA SecurityX Practice Questions: Application Security

9 free, exam-style CompTIA SecurityX (CAS-005) practice questions covering Application Security. Each question shows the correct answer and a clear explanation. Ready for the real thing? Take the full timed quiz below.

🚀 Take the full CompTIA SecurityX quiz 📘 CompTIA SecurityX study guide

Q1. Which of the following is MOST important when securing API gateways?

Explanation: API gateways must validate tokens and enforce access controls. Learn more.

Q2. Which of the following is a key security control for microservices architecture?

Explanation: Microservices require strict authentication between services. Learn more.

Q3. What is the PRIMARY security benefit of using OpenID Connect (OIDC) over SAML?

Explanation: OIDC is more modern and web-friendly than SAML. Learn more.

Q4. What is the PRIMARY security benefit of using WebAssembly (Wasm) sandboxing?

Explanation: Wasm provides secure sandboxing for web applications. Learn more.

Q5. Which technique is used to prevent SQL injection attacks?

Explanation: Input validation ensures only expected data formats are processed. Learn more.

Q6. Which of the following is a critical component of a secure DevOps pipeline?

Explanation: SAST identifies vulnerabilities early in development. Learn more.

Q7. Which technique mitigates SQL injection attacks?

Explanation: Input validation and parameterized queries prevent SQLi. Learn more.

Q8. Which secure development control is most useful early in the coding phase to find insecure functions?

Explanation: Static application security testing analyzes source or compiled code before deployment and can catch issues early. Learn more.

Q9. Which architecture component terminates and inspects API calls for authentication, authorization, and throttling?

Explanation: API gateways can centralize authentication, authorization, rate limiting, logging, and request validation. Learn more.

More CompTIA SecurityX practice topics