An organization is prioritizing efforts to remediate or mitigate risks identified during the latest assessment. For one of the risks, a full remediation was not possible, but the organization was able to successfully apply mitigations to reduce the likelihood of impact.Which of the following should the organization perform NEXT?

Update the organization's threat model.

Move to the next risk in the register.

Recalculate the magnitude of impact.

A security compliance requirement states that specific environments that handle sensitive data must be protected by need-to-know restrictions and can only connect to authorized endpoints. The requirement also states that a DLP solution within the environment must be used to control the data from leaving the environment.Which of the following should be implemented for privileged users so they can support the environment from their workstations while remaining compliant?

NAC to control authorized endpoints

FIM on the servers storing the data

A jump box in the screened subnet

A general VPN solution to the primary network

A large number of emails have been reported, and a security analyst is reviewing the following information from the emails: As part of the image process, which of the following is the FIRST step the analyst should take?

Compare the 'Return-Path' and 'Received' fields.

Block the email address carl b@comptia1 com, as it is sending spam to subject matter experts

Validate the final 'Received' header against the DNS entry of the domain.

Compare the 'Return-Path' and 'Received' fields.

Ignore the emails, as SPF validation is successful, and it is a false positive

A security architect is given the following requirements to secure a rapidly changing enterprise with an increasingly distributed and remote workforce* Cloud-delivered services* Full network security stack* SaaS application security management* Minimal latency for an optimal user experience* Integration with the cloud 1AM platformWhich of the following is the BEST solution?

Routing and Remote Access Service (RRAS)

Managed Security Service Provider (MSSP)

An HVAC contractor requested network connectivity permission to remotely support/troubleshoot equipment issues at a company location. Currently, the company does not have a process that allows vendors remote access to the corporate network Which of the following solutions represents the BEST course of action to allow the contractor access?

Create a dedicated segment with no access to the corporate network Implement dedicated VPN hardware for vendor access

Add the vendor's equipment to the existing network Give the vendor access through the standard corporate VPN

Give the vendor a standard desktop PC to attach the equipment to Give the vendor access through the standard corporate VPN

Establish a certification process for the vendor Allow certified vendors access to the VDI to monitor and maintain the HVAC equipment

Create a dedicated segment with no access to the corporate network Implement dedicated VPN hardware for vendor access

Which of the following is required for an organization to meet the ISO 27018 standard?

All network traffic must be inspected.

GDPR equivalent standards must be met

COBIT equivalent standards must be met

A company based in the United States holds insurance details of EU citizens. Which of the following must be adhered to when processing EU citizens' personal, private, and confidential data?

The principle of lawful, fair, and transparent processing

The right to be forgotten principle of personal data erasure requests

The non-repudiation and deniability principle

The principle of encryption, obfuscation, and data masking

A security architect was asked to modify an existing internal network design to accommodate the following requirements for RDP:* Enforce MFA for RDP* Ensure RDP connections are only allowed with secure ciphers.The existing network is extremely complex and not well segmented. Because of these limitations, the company has requested that the connections not be restricted by network-level firewalls Of ACLs.Which of the following should the security architect recommend to meet these requirements?

Implement a remote desktop gateway server, enforce secure ciphers, and configure to use OTP

Implement a reverse proxy for remote desktop with a secure cipher configuration enforced.

Implement a bastion host with a secure cipher configuration enforced.

Implement a remote desktop gateway server, enforce secure ciphers, and configure to use OTP

Implement a GPO that enforces TLS cipher suites and limits remote desktop access to only VPN users.

A forensic investigator would use the foremost command for:

analyzing network-captured packets.

extracting features such as email addresses

An organization mat provides a SaaS solution recently experienced an incident involving customer data loss. The system has a level of sell-healing that includes monitoring performance and available resources. When me system detects an issue, the self-healing process is supposed to restart pans of me software.During the incident, when me self-healing system attempted to restart the services, available disk space on the data drive to restart all the services was inadequate. The self-healing system did not detect that some services did not fully restart and declared me system as fully operational. Which of the following BEST describes me reason why the silent failure occurred?

Conditional checks prior to the service restart succeeded.

The system logs rotated prematurely.

The disk utilization alarms are higher than what me service restarts require.

The number of nodes in me self-healing cluster was healthy,

Conditional checks prior to the service restart succeeded.

A DevOps team has deployed databases, event-driven services, and an API gateway as PaaS solution that will support a new billing system. Which of the following security responsibilities will the DevOps team need to perform?

Securely configure the authentication mechanisms

Patch the infrastructure at the operating system

Execute port scanning against the services

Upgrade the service as part of life-cycle management

An auditor needs to scan documents at rest for sensitive text. These documents contain both text and Images. Which of the following software functionalities must be enabled in the DLP solution for the auditor to be able to fully read these documents? (Select TWO).

Optical character recognition functionality

Regular expression pattern matching

Optical character recognition functionality

An auditor needs to scan documents at rest for sensitive text. These documents contain both text and Images. Which of the following software functionalities must be enabled in the DLP solution for the auditor to be able to fully read these documents? (Select TWO).

Optical character recognition functionality

Regular expression pattern matching

Optical character recognition functionality

A company Is adopting a new artificial-intelligence-based analytics SaaS solution. This Is the company's first attempt at using a SaaS solution, and a security architect has been asked to determine any future risks. Which of the following would be the GREATEST risk In adopting this solution?

The inability to obtain company data when migrating to another service

The inability to assign access controls to comply with company policy

The inability to require the service provider process data in a specific country

The inability to obtain company data when migrating to another service

The inability to conduct security assessments against a service provider

An attack team performed a penetration test on a new smart card system. The team demonstrated that by subjecting the smart card to high temperatures, the secret key could be revealed.Which of the following side-channel attacks did the team use?

Differential temperature analysis

An auditor Is reviewing the logs from a web application to determine the source of an Incident. The web application architecture Includes an Internet-accessible application load balancer, a number of web servers In a private subnet, application servers, and one database server In a tiered configuration. The application load balancer cannot store the logs. The following are sample log snippets: Which of the following should the auditor recommend to ensure future incidents can be traced back to the sources?

Install a certificate signed by a trusted CA.

Enable the x-Forwarded-For header al the load balancer.

Install a software-based HIDS on the application servers.

Install a certificate signed by a trusted CA.

Use stored procedures on the database server.

Store the value of the $_server ( ' REMOTE_ADDR ' ] received by the web servers.

A help desk technician just informed the security department that a user downloaded a suspicious file from internet explorer last night. The user confirmed accessing all the files and folders before going home from work. the next morning, the user was no longer able to boot the system and was presented a screen with a phone number. The technician then tries to boot the computer using wake-on-LAN, but the system would not come up. which of the following explains why the computer would not boot?

The operating system was corrupted.

SElinux was in enforced status.

A secure boot violation occurred.

A small business would like to provide guests who are using mobile devices encrypted WPA3 access without first distributing PSKs or other credentials. Which of the following features will enable the business to meet this objective?

Simultaneous Authentication of Equals

Extensible Authentication Protocol

CompTIA CAS-004 Practice Test 5 - Free Online Exam Questions 161-200

A company is looking for a solution to hide data stored in databases. The solution must meet the following requirements:

Be efficient at protecting the production environment

Not require any change to the application

Act at the presentation layer

Which of the following techniques should be used?

Become a Premium Member for full access

Unlock Premium Member

CompTIA CAS-004 Practice Test 5

Question

CompTIA CAS-004 Practice Tests

Practice Tests