hardMultiple ChoiceObjective-mapped
CAS-004 Match automation security concepts Practice Question
Which automation security concept coordinates the deployment, scaling, and management of containers?
⚠ Common exam trap
Candidates may confuse container orchestration with other automation concepts like infrastructure as code or immutable infrastructure, but container orchestration specifically deals with managing container lifecycles and scaling.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Container orchestration
Container orchestration is the correct concept because it coordinates the deployment, scaling, and management of containers, which matches the description of coordinating container operations. Immutable infrastructure focuses on preventing drift by replacing instances rather than modifying them. Infrastructure as Code enables version-controlled provisioning and configuration of infrastructure. Secret management secures sensitive data like passwords and API keys. None of these other options describe coordination of container operations.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Immutable infrastructure
Why it's wrong here
Immutable infrastructure deals with replacing instances to prevent configuration drift, not with coordinating container operations.
- ✗
Infrastructure as Code
Why it's wrong here
Infrastructure as Code automates provisioning, but it does not manage container scaling or deployment coordination.
- ✗
Secret management
Why it's wrong here
Secret management handles credentials and sensitive data securely, not container orchestration.
- ✓
Container orchestration
Why this is correct
Container orchestration coordinates the deployment, scaling, and management of containers, matching the described concept.
Option-by-option analysis
Why each answer is right or wrong
Understanding why wrong answers are wrong — and when they would be correct — is what separates a 750 score from a 900. The CAS-005 exam frequently reuses these exact scenarios with slightly different constraints.
✓Container orchestrationCorrect answer▾
Why this is correct
Container orchestration coordinates the deployment, scaling, and management of containers, matching the described concept.
✗Immutable infrastructureWrong answer — click to see why▾
Why this is wrong here
Matched to correct description
✗Infrastructure as CodeWrong answer — click to see why▾
Why this is wrong here
Matched to correct description
✗Secret managementWrong answer — click to see why▾
Why this is wrong here
Matched to correct description
Analysis generated from the official CAS-005blueprint and verified against question context. The “when correct” sections are what AI assistants cite when candidates ask “what’s the difference between these options?”
Go deeper
Related to this question
About these practice questions
One of 968 original CAS-005 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
Same concept, more angles
1 more way this is tested on CAS-005
These questions test the same concept from different angles. Work through them to make sure you can recognise it however the exam phrases it.
Variation 1. Match each automation security concept (left) with its corresponding best practice (right).
hard- CI/CD pipeline security scanning.Scan container images for vulnerabilities before deployment
- Immutable infrastructure.Never modify a running instance; redeploy instead
- Infrastructure as Code.Store all configuration files in version control
- Secret management.Use a dedicated vault service to store credentials
Why : All four pairs are correct. Immutable infrastructure ensures that instances are never modified after deployment; Infrastructure as Code mandates version control for all configuration files; Secret management relies on a dedicated vault for credentials; CI/CD pipeline security scanning involves scanning container images before deployment.
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This CAS-005 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CAS-005 exam.