A company launched a new service and created a landing page within its website network for users to access the service. Per company policy, all websites must utilize encryption for any authentication pages. A junior network administrator proceeded to use an outdated procedure to order new certificates. Afterward, customers are reporting the following error when accessing a new web page: NET:ERR_CERT_COMMON_NAME_INVALID. Which of the following BEST describes what the administrator should do NEXT?

Request a new certificate with the same information but including the old certificate on the CRL.

Request a new certificate with the correct subject alternative name that includes the new websites.

Request a new certificate with the correct organizational unit for the company's website.

Request a new certificate with a stronger encryption strength and the latest cipher suite.

Request a new certificate with the same information but including the old certificate on the CRL.

An enterprise is undergoing an audit to review change management activities when promoting code to production. The audit reveals the following:* Some developers can directly publish code to the production environment.* Static code reviews are performed adequately.* Vulnerability scanning occurs on a regularly scheduled basis per policy.Which of the following should be noted as a recommendation within the audit report?

Implement short maintenance windows.

Perform periodic account reviews.

An organization is assessing the security posture of a new SaaS CRM system that handles sensitive PI I and identity information, such as passport numbers. The SaaS CRM system does not meet the organization's current security standards. The assessment identifies the following:1) There will be a 520,000 per day revenue loss for each day the system is delayed going into production.2) The inherent risk is high.3) The residual risk is low.4) There will be a staged deployment to the solution rollout to the contact center.Which of the following risk-handling techniques will BEST meet the organization's requirements?

Avoid the risk by accepting the shared responsibility model with the SaaS CRM provider.

Apply for a security exemption, as the risk is too high to accept.

Transfer the risk to the SaaS CRM vendor, as the organization is using a cloud service.

Accept the risk, as compensating controls have been implemented to manage the risk.

Avoid the risk by accepting the shared responsibility model with the SaaS CRM provider.

An organization requires a legacy system to incorporate reference data into a new system. The organization anticipates the legacy system will remain in operation for the next 18 to 24 months. Additionally, the legacy system has multiple critical vulnerabilities with no patches available to resolve them. Which of the following is the BEST design option to optimize security?

Deploy the legacy application on an air-gapped system.

Limit access to the system using a jump box.

Place the new system and legacy system on separate VLANs

Deploy the legacy application on an air-gapped system.

Implement MFA to access the legacy system.

An organization is assessing the security posture of a new SaaS CRM system that handles sensitive Pll and identity information, such as passport numbers. The SaaS CRM system does not meet the organization's current security standards. The assessment identifies the following:1- There will be a $20,000 per day revenue loss for each day the system is delayed going into production.2- The inherent risk is high.3- The residual risk is low.4- There will be a staged deployment to the solution rollout to the contact center.Which of the following risk-handling techniques will BEST meet the organization's requirements?

Apply for a security exemption, as the risk is too high to accept.

Transfer the risk to the SaaS CRM vendor, as the organization is using a cloud service.

Accept the risk, as compensating controls have been implemented to manage the risk.

Avoid the risk by accepting the shared responsibility model with the SaaS CRM provider.

An attacker infiltrated an electricity-generation site and disabled the safety instrumented system. Ransomware was also deployed on the engineering workstation. The environment has back-to-back firewalls separating the corporate and OT systems. Which of the following is the MOST likely security consequence of this attack?

A turbine would overheat and cause physical harm.

The engineers would need to go to the historian.

The SCADA equipment could not be maintained.

Data would be exfiltrated through the data diodes.

A software development company makes Its software version available to customers from a web portal. On several occasions, hackers were able to access the software repository to change the package that is automatically published on the website. Which of the following would be the BEST technique to ensure the software the users download is the official software released by the company?

Display the SHA checksum on the website.

Distribute the software via a third-party repository.

Close the web repository and deliver the software via email.

Email the software link to all customers.

Display the SHA checksum on the website.

An organization is establishing a new software assurance program to vet applications before they are introduced into the production environment, Unfortunately. many Of the applications are provided only as compiled binaries. Which Of the following should the organization use to analyze these applications? (Select TWO).

Third-party dependency management

An organization is deploying a new, online digital bank and needs to ensure availability and performance. The cloud-based architecture is deployed using PaaS and SaaS solutions, and it was designed with the following considerations:- Protection from DoS attacks against its infrastructure and web applications is in place.- Highly available and distributed DNS is implemented.- Static content is cached in the CDN.- A WAF is deployed inline and is in block mode.- Multiple public clouds are utilized in an active-passive architecture.With the above controls in place, the bank is experiencing a slowdown on the unauthenticated payments page. Which of the following is the MOST likely cause?

The public cloud provider is applying QoS to the inbound customer traffic.

The API gateway endpoints are being directly targeted.

The site is experiencing a brute-force credential attack.

A DDoS attack is targeted at the CDN.

A security architect needs to implement a CASB solution for an organization with a highly distributed remote workforce. One Of the requirements for the implementation includes the capability to discover SaaS applications and block access to thosethat are unapproved or identified as risky. Which of the following would BEST achieve this objective?

Implement cloud infrastructure to proxy all user web traffic and control access according to centralized policy.

Deploy endpoint agents that monitor local web traffic to enforce DLP and encryption policies.

Implement cloud infrastructure to proxy all user web traffic to enforce DI-P and encryption policies.

Implement cloud infrastructure to proxy all user web traffic and control access according to centralized policy.

Deploy endpoint agents that monitor local web traffic and control access according to centralized policy.

An administrator at a software development company would like to protect the integrity Of the company's applications with digital signatures. The developers report that the signing process keeps failing on all applications. The same key pair used for signing, however, is working properly on the website, is valid, and is issued by a trusted C

The CA has included the certificate in its CRL_

Which of the following is MOST likely the cause of the signature failing?

The NTP server is set incorrectly for the developers.

The CA has included the certificate in its CRL_

The certificate is set for the wrong key usage.

Each application is missing a SAN or wildcard entry on the certificate.

A municipal department receives telemetry data from a third-party provider The server collecting telemetry sits in the municipal departments screened network and accepts connections from the third party over HTTPS. The daemon has a code execution vulnerability from a lack of input sanitization of out-of-bound messages, and therefore, the cybersecurity engineers would like to Implement nsk mitigations. Which of the following actions, if combined, would BEST prevent exploitation of this vulnerability? (Select TWO).

Implementing a TLS inspection proxy on-path to enable monitoring and policy enforcement

Installing and configuring filesystem integrity monitoring service on the telemetry server

Implementing a TLS inspection proxy on-path to enable monitoring and policy enforcement

Creating a Linux namespace on the telemetry server and adding to it the servicing HTTP daemon

Installing and configuring filesystem integrity monitoring service on the telemetry server

Implementing an EDR and alert on Identified privilege escalation attempts to the SIEM

Subscribing to a UTM service that enforces privacy controls between the internal network and the screened subnet

Using the published data schema to monitor and block off nominal telemetry messages

An organization recently recovered from an attack that featured an adversary injecting Malicious logic into OS bootloaders on endpoint devices Therefore, the organization decided to require the use of TPM for measured boot and attestation, monitoring each component from the IJEFI through the full loading of OS components. of the following TPM structures enables this storage functionality?

Platform configuration registers

Command tag structures with MAC schemes

Platform configuration registers

A security analyst at a global financial firm was reviewing the design of a cloud-based system to identify opportunities to improve the security of the architecture. The system was recently involved in a data breach after a vulnerability was exploited within a virtual machine's operating system. The analyst observed the VPC in which the system was located was not peered with the security VPC that contained the centralized vulnerability scanner due to the cloud provider's limitations. Which of the following is the BEST course of action to help prevent this situation m the near future?

Establish cross-account trusts to connect all VPCs via API for secure configuration scanning.

Migrate the system to another larger, top-tier cloud provider and leverage the additional VPC peering flexibility.

Implement a centralized network gateway to bridge network traffic between all VPCs.

Enable VPC traffic mirroring for all VPCs and aggregate the data for threat detection.

A security operations center analyst is investigating anomalous activity between a database server and an unknown external IP address and gathered the following data:* dbadmin last logged in at 7:30 a.m. and logged out at 8:05 a.m.* A persistent TCP/6667 connection to the external address was established at 7:55 a.m. The connection is still active.* Other than bytes transferred to keep the connection alive, only a few kilobytes of data transfer every hour since the start of the connection.* A sample outbound request payload from PCAP showed the ASCII content: 'JOIN #community'.Which of the following is the MOST likely root cause?

The dbadmin user is consulting the community for help via Internet Relay Chat.

A SQL injection was used to exfiltrate data from the database server.

The system has been hijacked for cryptocurrency mining.

A botnet Trojan is installed on the database server.

The dbadmin user is consulting the community for help via Internet Relay Chat.

CompTIA CAS-004 Practice Test 6 - Free Online Exam Questions 201-240

A company wants to quantify and communicate the effectiveness of its security controls but must establish measures. Which of the following is MOST likely to be included in an effective assessment roadmap for these controls?

Become a Premium Member for full access

Unlock Premium Member

CompTIA CAS-004 Practice Test 6

Question

CompTIA CAS-004 Practice Tests

Practice Tests