最新的CompTIA CAS-002免費考試真題

問題1

An extensible commercial software system was upgraded to the next minor release version to patch a security vulnerability. After the upgrade, an unauthorized intrusion into the system was detected. The software vendor is called in to troubleshoot the issue and reports that all core components were updated properly. Which of the following has been overlooked in securing the system? (Select TWO).

A. The software patch was not cryptographically signed.

B. The company's IDS signatures were not updated.

C. The patch caused the system to revert to http.

D. The company's custom code was not patched.

E. Third-party plug-ins were not patched.

F. The wrong version of the patch was used.

正確答案: D,E

問題2

An assessor identifies automated methods for identifying security control compliance through validating sensors at the endpoint and at Tier 2. Which of the following practices satisfy continuous monitoring of authorized information systems?

A. Ongoing authorization

B. Risk assessment

C. Security test and evaluation

D. Independent verification and validation

正確答案: A

問題3

A company has adopted a BYOD program. The company would like to protect confidential information. However, it has been decided that when an employee leaves, the company will not completely wipe the personal device. Which of the following would MOST likely help the company maintain security when employees leave?

A. Whitelist access to only non-confidential information

B. Require that devices not have local storage

C. Require cloud storage on corporate servers and disable access upon termination

D. Utilize an MDM solution with containerization

正確答案: D

問題4

Some mobile devices are jail-broken by connecting via USB cable and then exploiting software vulnerabilities to get kernel-level access. Which of the following attack types represents this scenario? (Select TWO).

A. Man-in-the-middle

B. Root-kit compromise

C. Protocol fuzzing

D. Session management attack

E. Privilege escalation

F. Physical attack

正確答案: E,F

問題5

A database administrator comes across the below records in one of the databases during an internal audit of the payment system:
UserIDAddressCredit Card No.Password
jsmith123 fake street55XX-XXX-XXXX-1397Password100
jqdoe234 fake street42XX-XXX-XXXX-202717DEC12
From a security perspective, which of the following should be the administrator's GREATEST concern, and what will correct the concern?

A. Concern: More than four digits within a credit card number are stored.Correction: Only store the last four digits of a credit card to protect sensitive financial information.

B. Concern: User IDs are also usernames, and could be enumerated, thereby disclosing sensitive account information.Correction: Require user IDs to be more complex by using alphanumeric characters and hash the UserIDs.

C. Concern: User IDs are confidential private information.Correction: Require encryption of user IDs.

D. Concern: Passwords are stored in plain text.Correction: Require a minimum of 8 alphanumeric characters and hash the password.

正確答案: D

問題6

A web developer is responsible for a simple web application that books holiday accommodations. The front-facing web server offers an HTML form, which asks for a user's age. This input gets placed into a signed integer variable and is then checked to ensure that the user is in the adult age range.
Users have reported that the website is not functioning correctly. The web developer has inspected log files and sees that a very large number (in the billions) was submitted just before the issue started occurring. Which of the following is the MOST likely situation that has occurred?

A. Computers are able to store numbers well above "billions" in size. Therefore, the website issues are not related to the large number being input.

B. The age variable has had an integer overflow and was assigned a very small negative number which led to unpredictable application behavior. Improper error handling prevented the application from recovering.

C. The application has crashed because a very large integer has led to a "divide by zero". Improper error handling prevented the application from recovering.

D. The age variable stored the large number and filled up disk space which stopped the application from continuing to function. Improper error handling prevented the application from recovering.

正確答案: B

問題7

The Chief Information Officer (CIO) of a technology company is likely to move away from a de-perimeterized model for employee owned devices. This is because there were too many issues with lack of patching, malware incidents, and data leakage due to lost/stolen devices which did not have full-disk encryption. The `bring your own computing' approach was originally introduced because different business units preferred different operating systems and application stacks. Based on the issues and user needs, which of the following is the BEST recommendation for the CIO to make?

A. The de-perimeterized model should be kept as this is major industry trend and other companies are following this direction. Advise that the issues being faced are standard business as usual concerns in a modern IT environment.

B. The de-perimeterized model should be kept but update company policies to state that non-company end-points require full disk encryption, anti-virus software, and regular patching.

C. Update the policy to disallow non-company end-point devices on the corporate network.Allow only one type of outsourced SOE to all users as this will be easier to provision, secure, and will save money on operating costs.

D. Update the policy to disallow non-company end-point devices on the corporate network.Develop security-focused standard operating environments (SOEs) for all required operating systems and ensure the needs of each business unit are met.

正確答案: D

問題8

The IT manager is evaluating IPS products to determine which would be most effective at stopping network traffic that contains anomalous content on networks that carry very specific types of traffic. Based on the IT manager's requirements, which of the following types of IPS products would be BEST suited for use in this situation?

A. Rate-based

B. Host-based

C. Signature-based

D. Anomaly-based

正確答案: D

問題9

A company has noticed recently that its corporate information has ended up on an online forum. An investigation has identified that internal employees are sharing confidential corporate information on a daily basis. Which of the following are the MOST effective security controls that can be implemented to stop the above problem? (Select TWO).

A. Security awareness compliance training for all employees

B. Implement NIDS on the desktop and DMZ networks

C. Review of security policies and procedures

D. Implement DLP on the desktop, email gateway, and web proxies

E. Implement a URL filter to block the online forum

正確答案: A,D

問題10

Which of the following is the information owner responsible for?

A. Integrating security considerations into application and system purchasing decisions.

B. Determining the proper classification levels for data within the system.

C. Implementing and evaluating security controls by validating the integrity of the data.

D. Developing policies, standards, and baselines.

正確答案: B

問題11

A UNIX administrator notifies the storage administrator that extra LUNs can be seen on a UNIX server. The LUNs appear to be NTFS file systems. Which of the following MOST likely happened?

A. The iSCSI initiator was not restarted.

B. The UNIX server is multipathed.

C. The HBA allocation is wrong.

D. The NTFS LUNs are snapshots.

正確答案: C

問題12

An information security assessor for an organization finished an assessment that identified critical issues with the human resource new employee management software application.
The assessor submitted the report to senior management but nothing has happened.
Which of the following would be a logical next step?

A. Include specific case studies from other organizations in an updated report.

B. Meet the two key VPs and request a signature on the original assessment.

C. Craft an RFP to begin finding a new human resource application.

D. Schedule a meeting with key human resource application stakeholders.

正確答案: D

問題13

The security administrator at a company has received a subpoena for the release of all the email received and sent by the company Chief Information Officer (CIO) for the past three years. The security administrator is only able to find one year's worth of email records on the server and is now concerned about the possible legal implications of not complying with the request. Which of the following should the security administrator check BEFORE responding to the request?

A. The company data retention policies and guidelines

B. The company data privacy policies

C. The company data retention procedures

D. The company backup logs and archives

正確答案: D

問題14

A Chief Information Security Officer (CISO) of a major consulting firm has significantly increased the company's security posture; however, the company is still plagued by data breaches of misplaced assets. These data breaches as a result have led to the compromise of sensitive corporate and client data on at least 25 occasions. Each employee in the company is provided a laptop to perform company business. Which of the following actions can the CISO take to mitigate the breaches?

A. Implement full disk encryption on all storage devices the firm owns.

B. Implement an open source system which allows data to be encrypted while processed.

C. Reload all user laptops with full disk encryption software immediately.

D. Implement new continuous monitoring procedures.

正確答案: A

問題15

A data breach has occurred at Company A and as a result, the Chief Information Officer (CIO) has resigned. The CIO's laptop, cell phone and PC were all wiped of data per company policy. A month later, prosecutors in litigation with Company A suspect the CIO knew about the data breach long before it was discovered and have issued a subpoena requesting all the CIO's email from the last 12 months. The corporate retention policy recommends keeping data for no longer than 90 days. Which of the following should occur?

A. Restore the CIO's email from an email server backup and provide the last 90 days from the date of the subpoena request.

B. Restore the CIO's email from an email server backup and provide the last 90 days from the date of the CIO resignation.

C. Inform the litigators that the CIOs information has been deleted as per corporate policy.

D. Restore the CIO's email from an email server backup and provide whatever is available up to the last 12 months from the subpoena date.

正確答案: D

最新的CompTIA Advanced Security Practitioner (CASP) - CAS-002免費考試真題

聯系我們

站內鏈接

最新更新