CAS-005 — questions

Page 5 of 20 · 393 total questions.

CAS-005 Question 85

Topic 1 · Question 85 · Select all that apply

Users are experiencing a variety of issues when trying to access corporate resources. Examples include: • Connectivity issues between local computers and file servers between branch offices • Inability to download corporate applications on mobile endpoints while working remotely • Certificate errors when accessing internal web applications Which of the following actions are the most relevant when troubleshooting the reported issues? (Choose two.)

AReview VPN throughput. (correct answer)
BCheck IDS rules.
CRestore static content on the CDN.
DEnable secure authentication using NAC.
EImplement advanced WAF rules.
FValidate MDM asset compliance. (correct answer)

Reveal answer & explanation

Correct answer: A, F

The correct answer is A, F. Option A: Review VPN throughput. Option F: Validate MDM asset compliance.

Explanation

A VPN creates an encrypted tunnel across an untrusted network for private remote or site connectivity.

CAS-005 Question 86

Single page →

Topic 1 · Question 86

A network engineer recorded the following test results: After a new network security appliance was deployed, the results of the network test are as follows: Which of the following network infrastructure components most likely produced these results?

AIPS (correct answer)
BCDN
CVPN
DIDS

Reveal answer & explanation

Correct answer: A

The correct answer is A. Option A: IPS

Explanation

An intrusion prevention system detects and actively blocks malicious traffic inline. This option keeps traffic private / properly secured as required.

CAS-005 Question 87

Single page →

Topic 1 · Question 87

A developer needs to improve the cryptographic strength of a password-storage component in a web application without completely replacing the crypto-module. Which of the following is the most appropriate technique?

AKey splitting
BKey escrow
CKey rotation
DKey encryption
EKey stretching (correct answer)

Reveal answer & explanation

Correct answer: E

The correct answer is E. Option E: Key stretching

CAS-005 Question 88

Single page →

Topic 1 · Question 88

A company wants to implement hardware security key authentication for accessing sensitive information systems. The goal is to prevent unauthorized users from gaining access with a stolen password. Which of the following models should the company implement to best solve this issue?

ARule-based
BTime-based
CRole-based
DContext-based (correct answer)

Reveal answer & explanation

Correct answer: D

The correct answer is D. Option D: Context-based This option keeps traffic private / properly secured as required.

CAS-005 Question 89

Single page →

Topic 1 · Question 89

Which of the following is the main reason quantum computing advancements are leading companies and countries to deploy new encryption algorithms?

AEncryption systems based on large prime numbers will be vulnerable to exploitation. (correct answer)
BZero Trust security architectures will require homomorphic encryption.
CPerfect forward secrecy will prevent deployment of advanced firewall monitoring techniques.
DQuantum computers will enable malicious actors to capture IP traffic in real time.

Reveal answer & explanation

Correct answer: A

The correct answer is A. Option A: Encryption systems based on large prime numbers will be vulnerable to exploitation.

Explanation

Encryption protects confidentiality by making data unreadable without the appropriate key. This option keeps traffic private / properly secured as required.

CAS-005 Question 90

Single page →

Topic 1 · Question 90

A company is adopting microservice architecture in order to quickly remediate vulnerabilities and deploy to production. All of the microservices run on the same Linux platform. Significant time was spent updating the base OS before deploying code. Which of the following should the company do to make the process efficient?

AUse Terraform scripts while creating golden images. (correct answer)
BCreate a cron job to run apt-update every 30 days.
CUse snapshots to deploy code to existing compute instances.
DDeploy a centralized update server.

Reveal answer & explanation

Correct answer: A

The correct answer is A. Option A: Use Terraform scripts while creating golden images.

CAS-005 Question 91

Single page →

Topic 1 · Question 91 · Select all that apply

During a gap assessment, an organization notes that BYOD usage is a significant risk. The organization implemented administrative policies prohibiting BYOD usage. However, the organization has not implemented technical controls to prevent the unauthorized use of BYOD assets when accessing the organization's resources. Which of the following solutions should the organization implement to best reduce the risk of BYOD devices? (Choose two.)

ACloud IAM, to enforce the use of token-based MFA
BConditional access, to enforce user-to-device binding (correct answer)
CNAC, to enforce device configuration requirements (correct answer)
DPAM, to enforce local password policies
ESD-WAN, to enforce web content filtering through external proxies
FDLP, to enforce data protection capabilities

Reveal answer & explanation

Correct answer: B, C

The correct answer is B, C. Option B: Conditional access, to enforce user-to-device binding Option C: NAC, to enforce device configuration requirements

CAS-005 Question 92

Single page →

Topic 1 · Question 92

An organization has several systems deployed in a public cloud and wants to confirm that when data retention periods are reached, the data is properly disposed of. Which of the following best meets the organization's needs?

ADouble encrypting the data using both asymmetric and symmetric keys managed by the cloud service provider
BUtilizing a data-wiping software to overwrite the existing data
CEncrypting the data with customer-managed keys and then deleting both the encryption key and the volume (correct answer)
DAsking the cloud provider for copies of certificates of destruction

Reveal answer & explanation

Correct answer: C

The correct answer is C. Option C: Encrypting the data with customer-managed keys and then deleting both the encryption key and the volume

Explanation

Encryption protects confidentiality by making data unreadable without the appropriate key.

CAS-005 Question 93

Single page →

Topic 1 · Question 93

A security engineer reviews an after-action report from a previous security breach and notes a long lag time between detection and containment of a compromised account. The engineer suggests using SOAR to address this concern. Which of the following best explains the engineer's goal?

ATo prevent accounts from being compromised
BTo enable log correlation using machine learning
CTo orchestrate additional reporting for the security operations center
DTo prepare runbooks to automate future incident response (correct answer)

Reveal answer & explanation

Correct answer: D

The correct answer is D. Option D: To prepare runbooks to automate future incident response

Explanation

Incident response prepares for, detects, contains, eradicates, and recovers from security incidents while preserving evidence. This option keeps traffic private / properly secured as required.

CAS-005 Question 94

Single page →

Topic 1 · Question 94

During an audit at an organization, auditors find that developers are able to promote code to production. The auditors request a full review of all production changes. Which of the following should the organization implement to prevent a full review in the future?

ABranch protection (correct answer)
BCentralized code repositories
CInteractive application security testing
DChange control board

Reveal answer & explanation

Correct answer: A

The correct answer is A. Option A: Branch protection

CAS-005 Question 95

Single page →

Topic 1 · Question 95

A systems engineer is configuring SSO for a business that will be using SaaS applications for its remote-only workforce. Privileged actions in SaaS applications must be allowed only from corporate mobile devices that meet minimum security requirements, but BYOD must also be permitted for other activity. Which of the following would best meet this objective?

ABlock any connections from outside the business's network security boundary.
BInstall machine certificates on corporate devices and perform checks against the clients.
CConfigure device attestations and continuous authorization controls.
DDeploy application protection policies using a corporate, cloud-based MDM solution. (correct answer)

Reveal answer & explanation

Correct answer: D

The correct answer is D. Option D: Deploy application protection policies using a corporate, cloud-based MDM solution.

Explanation

Recovery point objective defines the maximum acceptable data loss measured in time. This option keeps traffic private / properly secured as required.

CAS-005 Question 96

Single page →

Topic 1 · Question 96

A systems administrator wants to reduce the number of failed patch deployments in an organization. The administrator discovers that system owners modify systems or applications in an ad hoc manner. Which of the following is the best way to reduce the number of failed patch deployments?

ACompliance tracking
BSituational awareness
CChange management (correct answer)
DQuality assurance

Reveal answer & explanation

Correct answer: C

The correct answer is C. Option C: Change management

CAS-005 Question 97

Single page →

Topic 1 · Question 97

A network engineer must ensure that always-on VPN access is enabled but restricted to company assets. Which of the following best describes what the engineer needs to do?

AGenerate device certificates using the specific template settings needed. (correct answer)
BModify signing certificates in order to support IKE version 2.
CCreate a wildcard certificate for connections from public networks.
DAdd the VPN hostname as a SAN entry on the root certificate.

Reveal answer & explanation

Correct answer: A

The correct answer is A. Option A: Generate device certificates using the specific template settings needed.

Explanation

A certificate binds a public key to an identity through a trusted certificate authority.

CAS-005 Question 98

Single page →

Topic 1 · Question 98

A security administrator is reviewing the following code snippet from a website component: A review of the inc.tmp file shows the following: 214875925793253420385093450834534324525234352353455234532423534245234534523453896276563857932578395378543620382630532804508325 Which of the following is most likely the reason for inaccuracies?

AA content management solution plug-in has been exploited. (correct answer)
BA search engine's bots are being blocked at the firewall.
CThe relevant stylesheet has become corrupted.
DThe WAF is configured to be in transparent mode.

Reveal answer & explanation

Correct answer: A

The correct answer is A. Option A: A content management solution plug-in has been exploited. This option keeps traffic private / properly secured as required.

CAS-005 Question 99

Single page →

Topic 1 · Question 99

An organization wants to implement a platform to better identify which specific assets are affected by a given vulnerability. Which of the following components provides the best foundation to achieve this goal?

ASASE
BCMDB (correct answer)
CSBoM
DSIEM

Reveal answer & explanation

Correct answer: B

The correct answer is B. Option B: CMDB

CAS-005 Question 100

Single page →

Topic 1 · Question 100

Which of the following best explains why AI output could be inaccurate?

AModel poisoning
BSocial engineering
COutput handling
DPrompt injections (correct answer)

Reveal answer & explanation

Correct answer: D

The correct answer is D. Option D: Prompt injections

CAS-005 Question 101

Single page →

Topic 1 · Question 101

A company runs a DAST scan on a web application. The tool outputs the following recommendations: • Use Cookie prefixes. • Content Security Policy - SameSite=strict is not set. Which of the following vulnerabilities has the tool identified?

ARCE
BXSS
CCSRF (correct answer)
DTOCTOU

Reveal answer & explanation

Correct answer: C

The correct answer is C. Option C: CSRF This option keeps traffic private / properly secured as required.

CAS-005 Question 102

Single page →

Topic 1 · Question 102

Which of the following best describes the reason a network architect would enable forward secrecy on all VPN tunnels?

AThis process is a requirement to enable hardware-accelerated cryptography.
BThis process reduces the success of attackers performing cryptanalysis.
CThe business requirements state that confidentiality is a critical success factor. (correct answer)
DModern cryptographic protocols list this process as a prerequisite for use.

Reveal answer & explanation

Correct answer: C

The correct answer is C. Option C: The business requirements state that confidentiality is a critical success factor.

CAS-005 Question 103

Single page →

Topic 1 · Question 103

Which of the following best explains the importance of determining organizational risk appetite when operating with a constrained budget?

ARisk appetite directly impacts acceptance of high-impact, low-likelihood events. (correct answer)
BOrganizational risk appetite varies from organization to organization.
CBudgetary pressure drives risk mitigation planning in all companies.
DRisk appetite directly influences which breaches are disclosed publicly.

Reveal answer & explanation

Correct answer: A

The correct answer is A. Option A: Risk appetite directly impacts acceptance of high-impact, low-likelihood events.

CAS-005 Question 104

Single page →

Topic 1 · Question 104 · Select all that apply

A company hired an email service provider called my-email.com to deliver company emails. The company started having several issues during the migration. A security engineer is troubleshooting and observes the following configuration snippet: Which of the following should the security engineer modify to fix the issue? (Choose two.)

AThe email CNAME record must be changed to a type A record pointing to 192.168.1.11
BThe TXT record must be changed to "v=dmarc ip4:192.168.1.10 include:my-email.com ~all"
CThe srv01 A record must be changed to a type CNAME record pointing to the email server
DThe email CNAME record must be changed to a type A record pointing to 192.168.1.10 (correct answer)
EThe TXT record must be changed to "v=dkim ip4:192.168.1.11 include:my-email.com ~all"
FThe TXT record must be changed to "v=spf ip4:192.168.1.10 include:my-email.com ~all" (correct answer)
GThe srv01 A record must be changed to a type CNAME record pointing to the web01 server

Reveal answer & explanation

Correct answer: D, F

The correct answer is D, F. Option D: The email CNAME record must be changed to a type A record pointing to 192.168.1.10 Option F: The TXT record must be changed to "v=spf ip4:192.168.1.10 include:my-email.com ~all" This option keeps traffic private / properly secured as required.

Showing questions 81–100 of 393 · Page 5 of 20