ExamGecko
Home / CompTIA / CAS-004 / List of questions
Ask Question

CompTIA CAS-004 Practice Test - Questions Answers, Page 15

List of questions

Question 141

Report Export Collapse

A security analyst observes the following while looking through network traffic in a company's cloud log:

CompTIA CAS-004 image Question 141 94109 10022024175034000000

Which of the following steps should the security analyst take FIRST?

Quarantine 10.0.5.52 and run a malware scan against the host.
Quarantine 10.0.5.52 and run a malware scan against the host.
Access 10.0.5.52 via EDR and identify processes that have network connections.
Access 10.0.5.52 via EDR and identify processes that have network connections.
Isolate 10.0.50.6 via security groups.
Isolate 10.0.50.6 via security groups.
Investigate web logs on 10.0.50.6 to determine if this is normal traffic.
Investigate web logs on 10.0.50.6 to determine if this is normal traffic.
Suggested answer: D
asked 02/10/2024
Harshvir Bhati
40 questions

Question 142

Report Export Collapse

Which of the following is the MOST important cloud-specific risk from the CSP's viewpoint?

Isolation control failure
Isolation control failure
Management plane breach
Management plane breach
Insecure data deletion
Insecure data deletion
Resource exhaustion
Resource exhaustion
Suggested answer: B
asked 02/10/2024
Do Hien
52 questions

Question 143

Report Export Collapse

An organization is developing a disaster recovery plan that requires data to be backed up and available at a moment's notice.

Which of the following should the organization consider FIRST to address this requirement?

Implement a change management plan to ensure systems are using the appropriate versions.
Implement a change management plan to ensure systems are using the appropriate versions.
Hire additional on-call staff to be deployed if an event occurs.
Hire additional on-call staff to be deployed if an event occurs.
Design an appropriate warm site for business continuity.
Design an appropriate warm site for business continuity.
Identify critical business processes and determine associated software and hardware requirements.
Identify critical business processes and determine associated software and hardware requirements.
Suggested answer: D
asked 02/10/2024
Aubrey Oliver Jr
43 questions

Question 144

Report Export Collapse

Leveraging cryptographic solutions to protect data that is in use ensures the data is encrypted:

when it is passed across a local network.
when it is passed across a local network.
in memory during processing
in memory during processing
when it is written to a system's solid-state drive.
when it is written to a system's solid-state drive.
by an enterprise hardware security module.
by an enterprise hardware security module.
Suggested answer: B
asked 02/10/2024
Susanne Hughes
37 questions

Question 145

Report Export Collapse

A Chief Information Officer (CIO) wants to implement a cloud solution that will satisfy the following requirements:

Support all phases of the SDLC.

Use tailored website portal software.

Allow the company to build and use its own gateway software.

Utilize its own data management platform.

Continue using agent-based security tools.

Which of the following cloud-computing models should the CIO implement?

SaaS
SaaS
PaaS
PaaS
MaaS
MaaS
IaaS
IaaS
Suggested answer: D
asked 02/10/2024
Nick Daniel
41 questions

Question 146

Report Export Collapse

A security analyst detected a malicious PowerShell attack on a single server. The malware used the Invoke-Expression function to execute an external malicious script. The security analyst scanned the disk with an antivirus application and did not find any IOCs. The security analyst now needs to deploy a protection solution against this type of malware.

Which of the following BEST describes the type of malware the solution should protect against?

Worm
Worm
Logic bomb
Logic bomb
Fileless
Fileless
Rootkit
Rootkit
Suggested answer: C
asked 02/10/2024
Aejaz Rab
31 questions

Question 147

Report Export Collapse

A development team created a mobile application that contacts a company's back-end APIs housed in a PaaS environment. The APIs have been experiencing high processor utilization due to scraping activities. The security engineer needs to recommend a solution that will prevent and remedy the behavior.

Which of the following would BEST safeguard the APIs? (Choose two.)

Bot protection
Bot protection
OAuth 2.0
OAuth 2.0
Input validation
Input validation
Autoscaling endpoints
Autoscaling endpoints
Rate limiting
Rate limiting
CSRF protection
CSRF protection
Suggested answer: D, E
asked 02/10/2024
Raajhavelu Rengaraj
24 questions

Question 148

Report Export Collapse

An organization's existing infrastructure includes site-to-site VPNs between datacenters. In the past year, a sophisticated attacker exploited a zero-day vulnerability on the VPN concentrator. Consequently, the Chief Information Security Officer (CISO) is making infrastructure changes to mitigate the risk of service loss should another zero-day exploit be used against the VPN solution.

Which of the following designs would be BEST for the CISO to use?

Adding a second redundant layer of alternate vendor VPN concentrators
Adding a second redundant layer of alternate vendor VPN concentrators
Using Base64 encoding within the existing site-to-site VPN connections
Using Base64 encoding within the existing site-to-site VPN connections
Distributing security resources across VPN sites
Distributing security resources across VPN sites
Implementing IDS services with each VPN concentrator
Implementing IDS services with each VPN concentrator
Transitioning to a container-based architecture for site-based services
Transitioning to a container-based architecture for site-based services
Suggested answer: A
Explanation:

If on VPN concentrator goes down due to a zero day threat, having a redundant VPN concentrator of a different vendor should keep you going.

asked 02/10/2024
Ali S Zahedi
44 questions

Question 149

Report Export Collapse

Which of the following technologies allows CSPs to add encryption across multiple data storages?

Symmetric encryption
Symmetric encryption
Homomorphic encryption
Homomorphic encryption
Data dispersion
Data dispersion
Bit splitting
Bit splitting
Suggested answer: D
asked 02/10/2024
Yohan Frachisse
33 questions

Question 150

Report Export Collapse

A vulnerability scanner detected an obsolete version of an open-source file-sharing application on one of a company's Linux servers. While the software version is no longer supported by the OSS community, the company's Linux vendor backported fixes, applied them for all current vulnerabilities, and agrees to support the software in the future.

Based on this agreement, this finding is BEST categorized as a:

true positive.
true positive.
true negative.
true negative.
false positive.
false positive.
false negative.
false negative.
Suggested answer: C
asked 02/10/2024
Charles Marlin
43 questions
Total 564 questions
Go to page: of 57
Search

Related questions