CompTIA CAS-004 Practice Test - Questions Answers, Page 48

The first step in reducing the attack surface of vulnerable, end-of-support systems is to apply hardening recommendations. Hardening involves applying security configurations, such as disabling unnecessary services, enforcing strong authentication, and tightening access controls to mitigate vulnerabilities on systems that can no longer receive patches or support. While patching and deploying security tools like IPS/IDS and antivirus are important, hardening addresses the fundamental weakness of these legacy systems by reducing their exposure to threats. CASP+ recommends hardening as a crucial measure in environments where patching or upgrading may not be feasible, particularly for unsupported systems.

CASP+ CAS-004 Exam Objectives: Domain 2.0 -- Enterprise Security Operations (System Hardening)

CompTIA CASP+ Study Guide: System Hardening for End-of-Life Systems

Given the vulnerability in the deprecated runtime engine, configuring an IPS (Intrusion Prevention System) and WAF (Web Application Firewall) with appropriate signatures is the best temporary control. This allows the organization to monitor and block potential attacks targeting known vulnerabilities in the runtime engine while the developers work on the transition. Shutting down the systems or uninstalling the runtime engine would cause service interruptions, and blocking traffic might disrupt legitimate users. IPS and WAF provide an active layer of defense without interrupting service. CASP+ emphasizes the use of layered security, including IPS and WAF, to mitigate risks in public-facing applications.

CASP+ CAS-004 Exam Objectives: Domain 3.0 -- Enterprise Security Architecture (Web Application Firewalls, Intrusion Prevention Systems)

CompTIA CASP+ Study Guide: Mitigating Application Vulnerabilities with WAFs and IPS

To prioritize server replacements based on the likelihood of failure, the MTBF (Mean Time Between Failures) metric is most appropriate. MTBF provides a measure of the average time a server or system is expected to operate before experiencing failure. This allows the management team to assess which servers are more likely to fail soon, irrespective of the application criticality, and thus should be replaced first. CASP+ highlights the use of MTBF in hardware lifecycle management and risk assessments.

CASP+ CAS-004 Exam Objectives: Domain 1.0 -- Risk Management (MTBF in Hardware Lifecycle)

CompTIA CASP+ Study Guide: Server Risk Assessments Using MTBF and Reliability Metrics

For an organization transitioning its Wi-Fi to WPA2/WPA3 Enterprise with EAP-TLS, X.509 certificates are crucial. EAP-TLS (Extensible Authentication Protocol-Transport Layer Security) is a certificate-based authentication protocol, and for it to work, both the client and server must have valid X.509 certificates. This ensures that the mobile devices can authenticate themselves securely to the wireless network. Other options like IPSec configurations or TOTP tokens are not relevant in the context of EAP-TLS wireless authentication. CASP+ highlights the importance of certificate management in secure wireless authentication protocols.

CASP+ CAS-004 Exam Objectives: Domain 3.0 -- Enterprise Security Architecture (Wireless Authentication and EAP-TLS)

CompTIA CASP+ Study Guide: Certificate Management for EAP-TLS

In this scenario, the voicemail requesting a wire transfer from an unfamiliar bank account is indicative of a deepfake attack, where attackers use advanced technology to simulate a person's voice or likeness. Deepfake technology is increasingly being used in social engineering attacks to impersonate executives or trusted individuals. This attack attempts to manipulate employees by making them believe they are receiving legitimate requests from high-ranking personnel. CASP+ discusses advanced threats like deepfakes, which leverage AI to bypass traditional security awareness defenses.

CASP+ CAS-004 Exam Objectives: Domain 2.0 -- Enterprise Security Operations (Advanced Social Engineering Threats)

CompTIA CASP+ Study Guide: Social Engineering and Deepfake Risks

PCI DSS (Payment Card Industry Data Security Standard) is the most appropriate governance framework when collecting and processing credit card data, including international user data. PCI DSS establishes security standards for organizations that handle payment card transactions and ensures the protection of cardholder data globally. The other options, such as ISO 27001 and NIST 800-53, provide general security frameworks, but PCI DSS is specifically designed for payment card security, which is critical when handling credit card information. CASP+ emphasizes the role of PCI DSS in ensuring the secure handling of payment data.

CASP+ CAS-004 Exam Objectives: Domain 1.0 -- Risk Management (PCI DSS Compliance for Payment Systems)

CompTIA CASP+ Study Guide: Payment Systems Security and PCI DSS

Tokenization is the best solution to protect payment card data from unauthorized disclosure when moving to the cloud. Tokenization replaces sensitive card data with unique identifiers (tokens) that have no exploitable value outside the tokenization system. Even if the data is compromised, the attacker would not obtain actual card numbers. This is in line with PCI DSS requirements for protecting payment card information. Other solutions like encryption at rest or field masking help, but tokenization provides the strongest protection by ensuring that card data is not stored at all.

CASP+ CAS-004 Exam Objectives: Domain 1.0 -- Risk Management (Tokenization and PCI DSS Compliance)

CompTIA CASP+ Study Guide: Data Protection Techniques (Tokenization)

When conducting a risk assessment for a vendor that provides multiple products, it is important to perform the assessment at the individual product level. Each product might have different risk factors, security requirements, and vulnerabilities, so assessing each one ensures a comprehensive understanding of the risks involved. Assessing randomly or only major products could leave gaps in understanding the risks for smaller but still critical products. CASP+ emphasizes that risk assessments should be detailed and product-specific for a thorough evaluation.

CASP+ CAS-004 Exam Objectives: Domain 1.0 -- Risk Management (Vendor and Product Risk Assessments)

CompTIA CASP+ Study Guide: Vendor Risk Management

A machine-learning-based data security service would best meet the pharmaceutical company's requirements to discover data, monitor changes, and identify suspicious activity across thousands of independent resources in cloud object storage. Machine learning can analyze vast amounts of data, detect patterns, and alert administrators to anomalies or suspicious activities without manual intervention. Traditional file integrity monitoring or data classification might not scale well or adapt dynamically to the complexity and size of the company's environment. CASP+ highlights the use of advanced technologies like machine learning for cloud security and monitoring.

CASP+ CAS-004 Exam Objectives: Domain 2.0 -- Enterprise Security Operations (Machine Learning for Security)

CompTIA CASP+ Study Guide: Cloud Security Monitoring with Machine Learning