Nest 0 Cart
Nest Account
Popular Exams
All Categories...
Nest
Nest 0
Contact
Log In / Sign Up
Copyright 2024 © store. All rights reserved.
Home CompTIA CAS-002

CompTIA CAS-002 Exam Practice Questions (P. 4)

  • Full Access (239 questions)
  • Six months of Premium Access
  • Access to one million comments
  • Seamless ChatGPT Integration
  • Ability to download PDF files
  • Anki Flashcard files for revision
  • No Captcha & No AdSense
  • Advanced Exam Configuration
Get Contributor Access
Question #16
A government agency considers confidentiality to be of utmost importance and availability issues to be of least importance. Knowing this, which of the following correctly orders various vulnerabilities in the order of MOST important to LEAST important?
  1. A
    Insecure direct object references, CSRF, Smurf
  2. B
    Privilege escalation, Application DoS, Buffer overflow
  3. C
    SQL injection, Resource exhaustion, Privilege escalation
  4. D
    CSRF, Fault injection, Memory leaks

Correct Answer:
A

Question #17
A security administrator wants to deploy a dedicated storage solution which is inexpensive, can natively integrate with AD, allows files to be selectively encrypted and is suitable for a small number of users at a satellite office. Which of the following would BEST meet the requirement?
  1. A
    SAN
  2. B
    NAS
  3. C
    Virtual SAN
  4. D
    Virtual storage

Correct Answer:
B

Question #18
At 9:00 am each morning, all of the virtual desktops in a VDI implementation become extremely slow and/or unresponsive. The outage lasts for around 10 minutes, after which everything runs properly again. The administrator has traced the problem to a lab of thin clients that are all booted at 9:00 am each morning. Which of the following is the MOST likely cause of the problem and the BEST solution? (Select TWO).
  1. A
    Add guests with more memory to increase capacity of the infrastructure.
  2. B
    A backup is running on the thin clients at 9am every morning.
  3. C
    Install more memory in the thin clients to handle the increased load while booting.
  4. D
    Booting all the lab desktops at the same time is creating excessive I/O.
  5. E
    Install 10-Gb uplinks between the hosts and the lab to increase network capacity.
  6. F
    Install faster SSD drives in the storage system used in the infrastructure.
  7. G
    The lab desktops are saturating the network while booting.
  8. H
    The lab desktops are using more memory than is available to the host systems.

Correct Answer:
DF

Question #19
A security administrator is shown the following log excerpt from a Unix system:
2013 Oct 10 07:14:57 web14 sshd[1632]: Failed password for root from 198.51.100.23 port 37914 ssh2
2013 Oct 10 07:14:57 web14 sshd[1635]: Failed password for root from 198.51.100.23 port 37915 ssh2
2013 Oct 10 07:14:58 web14 sshd[1638]: Failed password for root from 198.51.100.23 port 37916 ssh2
2013 Oct 10 07:15:59 web14 sshd[1640]: Failed password for root from 198.51.100.23 port 37918 ssh2
2013 Oct 10 07:16:00 web14 sshd[1641]: Failed password for root from 198.51.100.23 port 37920 ssh2
2013 Oct 10 07:16:00 web14 sshd[1642]: Successful login for root from 198.51.100.23 port 37924 ssh2
Which of the following is the MOST likely explanation of what is occurring and the BEST immediate response? (Select TWO).
  1. A
    An authorized administrator has logged into the root account remotely.
  2. B
    The administrator should disable remote root logins.
  3. C
    Isolate the system immediately and begin forensic analysis on the host.
  4. D
    A remote attacker has compromised the root account using a buffer overflow in sshd.
  5. E
    A remote attacker has guessed the root password using a dictionary attack.
  6. F
    Use iptables to immediately DROP connections from the IP 198.51.100.23.
  7. G
    A remote attacker has compromised the private key of the root account.
  8. H
    Change the root password immediately to a password not found in a dictionary.

Correct Answer:
CE

Question #20
A security administrator wants to prevent sensitive data residing on corporate laptops and desktops from leaking outside of the corporate network. The company has already implemented full-disk encryption and has disabled all peripheral devices on its desktops and laptops. Which of the following additional controls MUST be implemented to minimize the risk of data leakage? (Select TWO).
  1. A
    A full-system backup should be implemented to a third-party provider with strong encryption for data in transit.
  2. B
    A DLP gateway should be installed at the company border.
  3. C
    Strong authentication should be implemented via external biometric devices.
  4. D
    Full-tunnel VPN should be required for all network communication.
  5. E
    Full-drive file hashing should be implemented with hashes stored on separate storage.
  6. F
    Split-tunnel VPN should be enforced when transferring sensitive data.

Correct Answer:
BD

Previous Questions Next Questions

All Pages