ExamGecko
Login
Home / CompTIA / CAS-004 / List of questions
Ask Question

CompTIA CAS-004 Practice Test - Questions Answers, Page 18

List of questions

Question 171

Report Export Collapse

An HVAC contractor requested network connectivity permission to remotely support/troubleshoot equipment issues at a company location. Currently, the company does not have a process that allows vendors remote access to the corporate network Which of the following solutions represents the BEST course of action to allow the contractor access?

Add the vendor's equipment to the existing network Give the vendor access through the standard corporate VPN
Add the vendor's equipment to the existing network Give the vendor access through the standard corporate VPN
Give the vendor a standard desktop PC to attach the equipment to Give the vendor access through the standard corporate VPN
Give the vendor a standard desktop PC to attach the equipment to Give the vendor access through the standard corporate VPN
Establish a certification process for the vendor Allow certified vendors access to the VDI to monitor and maintain the HVAC equipment
Establish a certification process for the vendor Allow certified vendors access to the VDI to monitor and maintain the HVAC equipment
Create a dedicated segment with no access to the corporate network Implement dedicated VPN hardware for vendor access
Create a dedicated segment with no access to the corporate network Implement dedicated VPN hardware for vendor access
Suggested answer: D
asked 02/10/2024
Felipe Santos Cardoso
47 questions

Question 172

Report Export Collapse

Which of the following is required for an organization to meet the ISO 27018 standard?

All Pll must be encrypted.
All Pll must be encrypted.
All network traffic must be inspected.
All network traffic must be inspected.
GDPR equivalent standards must be met
GDPR equivalent standards must be met
COBIT equivalent standards must be met
COBIT equivalent standards must be met
Suggested answer: A
asked 02/10/2024
Haythem KEfi
37 questions

Question 173

Report Export Collapse

A vulnerability assessment endpoint generated a report of the latest findings. A security analyst needs to review the report and create a priority list of items that must be addressed. Which of the following should the analyst use to create the list quickly?

Business impact rating
Business impact rating
CVE dates
CVE dates
CVSS scores
CVSS scores
OVAL
OVAL
Suggested answer: A
asked 02/10/2024
Jack de Cort
43 questions

Question 174

Report Export Collapse

A security analyst is reviewing the following vulnerability assessment report:

CompTIA CAS-004 image Question 174 94142 10022024175034000000

Which of the following should be patched FIRST to minimize attacks against Internet-facing hosts?

Server1
Server1
Server2
Server2
Server 3
Server 3
Servers
Servers
Suggested answer: A
asked 02/10/2024
Stefan Hupfloher
54 questions

Question 175

Report Export Collapse

An organization is researching the automation capabilities for systems within an OT network. A security analyst wants to assist with creating secure coding practices and would like to learn about the programming languages used on the PLCs. Which of the following programming languages is the MOST relevant for PLCs?

Ladder logic
Ladder logic
Rust
Rust
C
C
Python
Python
Java
Java
Suggested answer: A
asked 02/10/2024
Anu V
35 questions

Question 176

Report Export Collapse

A company based in the United States holds insurance details of EU citizens. Which of the following must be adhered to when processing EU citizens' personal, private, and confidential data?

The principle of lawful, fair, and transparent processing
The principle of lawful, fair, and transparent processing
The right to be forgotten principle of personal data erasure requests
The right to be forgotten principle of personal data erasure requests
The non-repudiation and deniability principle
The non-repudiation and deniability principle
The principle of encryption, obfuscation, and data masking
The principle of encryption, obfuscation, and data masking
Suggested answer: A
asked 02/10/2024
Tom Nice
33 questions

Question 177

Report Export Collapse

A security architect was asked to modify an existing internal network design to accommodate the following requirements for RDP:

* Enforce MFA for RDP

* Ensure RDP connections are only allowed with secure ciphers.

The existing network is extremely complex and not well segmented. Because of these limitations, the company has requested that the connections not be restricted by network-level firewalls Of ACLs.

Which of the following should the security architect recommend to meet these requirements?

Implement a reverse proxy for remote desktop with a secure cipher configuration enforced.
Implement a reverse proxy for remote desktop with a secure cipher configuration enforced.
Implement a bastion host with a secure cipher configuration enforced.
Implement a bastion host with a secure cipher configuration enforced.
Implement a remote desktop gateway server, enforce secure ciphers, and configure to use OTP
Implement a remote desktop gateway server, enforce secure ciphers, and configure to use OTP
Implement a GPO that enforces TLS cipher suites and limits remote desktop access to only VPN users.
Implement a GPO that enforces TLS cipher suites and limits remote desktop access to only VPN users.
Suggested answer: C
Explanation:

A remote desktop gateway server is a solution that allows users to connect to remote desktops or applications over the internet using the Remote Desktop Protocol (RDP). A remote desktop gateway server can enforce MFA for RDP by integrating with Azure AD MFA using the Network Policy Server (NPS) extension. The NPS extension can send an OTP (one-time password) to the user's phone or mobile app as a second factor of authentication. A remote desktop gateway server can also enforce secure ciphers by configuring the SSL Cipher Suite Order Group Policy setting to specify the preferred order of cipher suites for TLS/SSL connections. Verified

Reference:

https://docs.microsoft.com/en-us/windows-server/remote/remote-desktop-services/rds-plan-access-from-anywhere

https://docs.microsoft.com/en-us/azure/active-directory/authentication/howto-mfa-nps-extension-rdg

https://docs.microsoft.com/en-us/windows-server/security/tls/tls-registry-settings#ssl-cipher-suite-order

asked 02/10/2024
Oscar Ballabriga
35 questions

Question 178

Report Export Collapse

A security engineer is reviewing a record of events after a recent data breach incident that Involved the following:

* A hacker conducted reconnaissance and developed a footprint of the company s Internet-facing web application assets.

* A vulnerability in a third-party horary was exploited by the hacker, resulting in the compromise of a local account.

* The hacker took advantage of the account's excessive privileges to access a data store and exfiltrate the data without detection.

Which of the following is the BEST solution to help prevent this type of attack from being successful in the future?

Dynamic analysis
Dynamic analysis
Secure web gateway
Secure web gateway
Software composition analysis
Software composition analysis
User behavior analysis
User behavior analysis
Stateful firewall
Stateful firewall
Suggested answer: C
Explanation:

Software composition analysis (SCA) is the best solution to help prevent this type of attack from being successful in the future. SCA is a process of identifying the third-party and open source components in the applications of an organization. This analysis leads to the discovery of security risks, quality of code, and license compliance of the components. SCA can help the security engineer to detect and remediate any vulnerabilities in a third-party library that was exploited by the hacker, such as updating to a newer and more secure version of the library. SCA can also help to enforce secure coding practices and standards, such as following the principle of least privilege and avoiding excessive privileges for local accounts. By using SCA, the security engineer can improve the security posture and resilience of the web application assets against future attacks. Verified

Reference:

https://www.synopsys.com/glossary/what-is-software-composition-analysis.html

https://www.geeksforgeeks.org/overview-of-software-composition-analysis/

asked 02/10/2024
nico farina
45 questions

Question 179

Report Export Collapse

A security engineer needs 10 implement a CASB to secure employee user web traffic. A Key requirement is mat relevant event data must be collected from existing on-premises infrastructure components and consumed by me CASB to expand traffic visibility. The solution must be nighty resilient to network outages. Which of the following architectural components would BEST meet these requirements?

Log collection
Log collection
Reverse proxy
Reverse proxy
AWAF
AWAF
API mode
API mode
Suggested answer: A
asked 02/10/2024
Sergio Zozulenko
45 questions

Question 180

Report Export Collapse

The Chief information Officer (CIO) wants to implement enterprise mobility throughout the organization. The goal is to allow employees access to company resources. However the CIO wants the ability to enforce configuration settings, manage data, and manage both company-owned and personal devices. Which of the following should the CIO implement to achieve this goal?

BYOO
BYOO
CYOD
CYOD
COPE
COPE
MDM
MDM
Suggested answer: A
asked 02/10/2024
Zdenek Kugler
33 questions
Total 564 questions
Go to page: of 57
Search
Open VPLUS File
Convert VPLUS to PDF

Related questions

Ransomware encrypted the entire human resources fileshare for a large financial institution. Security operations personnel were unaware of the activity until it was too late to stop it. The restoration will take approximately four hours, and the last backup occurred 48 hours ago. The management team has indicated that the RPO for a disaster recovery event for this data classification is 24 hours. Based on RPO requirements, which of the following recommendations should the management team make?
An internal security assessor identified large gaps in a company's IT asset inventory system during a monthly asset review. The assessor is aware of an external audit that is underway. In an effort to avoid external findings, the assessor chooses not to report the gaps in the inventory system. Which of the following legal considerations is the assessor directly violating?
A global organization's Chief Information Security Officer (CISO) has been asked to analyze the risks involved in a plan to move the organization's current MPLS-based WAN network to use commodity Internet and SD-WAN hardware. The SD-WAN provider is currently highly regarded but Is a regional provider. Which of the following is MOST likely identified as a potential risk by the CISO?
An organization is designing a network architecture that must meet the following requirements: Users will only be able to access predefined services. Each user will have a unique allow list defined for access. The system will construct one-to-one subject/object access paths dynamically. Which of the following architectural designs should the organization use to meet these requirements?
An application server was recently upgraded to prefer TLS 1.3, and now users are unable to connect their clients to the server. Attempts to reproduce the error are confirmed, and clients are reporting the following: ERR_SSL_VERSION_OR_CIPHER_MISMATCH Which of the following is MOST likely the root cause?
A security analyst is concerned that a malicious piece of code was downloaded on a Linux system. After some research, the analyst determines that the suspected piece of code is performing a lot of input/output (I/O) on the disk drive. Based on the output above, from which of the following process IDs can the analyst begin an investigation?
An loT device implements an encryption module built within its SoC where the asymmetric private key has been defined in a write-once read-many portion of the SoC hardware Which of the following should the loT manufacture do if the private key is compromised?
Due to locality and budget constraints, an organization's satellite office has a lower bandwidth allocation than other offices in the organization. As a result, the local security infrastructure staff is assessing architectural options that will help preserve network bandwidth and increase speed to both internal and external resources while not sacrificing threat visibility. Which of the following would be the BEST option to implement?
A company is outsourcing to an MSSP that performs managed detection and response services. The MSSP requires a server to be placed inside the network as a log aggregate and allows remote access to MSSP analyst. Critical devices send logs to the log aggregator, where data is stored for 12 months locally before being archived to a multitenant cloud. The data is then sent from the log aggregate to a public IP address in the MSSP datacenter for analysis. A security engineer is concerned about the security of the solution and notes the following. * The critical devise send cleartext logs to the aggregator. * The log aggregator utilize full disk encryption. * The log aggregator sends to the analysis server via port 80. * MSSP analysis utilize an SSL VPN with MFA to access the log aggregator remotely. * The data is compressed and encrypted prior to being achieved in the cloud. Which of the following should be the engineer's GREATEST concern?
Law enforcement officials informed an organization that an investigation has begun. Which of the following is the FIRST step the organization should take?