Nest 0 Cart
Nest Account
Popular Exams
All Categories...
Nest
Nest 0
Contact
Log In / Sign Up
Copyright 2024 © store. All rights reserved.
Home CompTIA CAS-004

CompTIA CAS-004 Exam Practice Questions (P. 4)

  • Full Access (645 questions)
  • Six months of Premium Access
  • Access to one million comments
  • Seamless ChatGPT Integration
  • Ability to download PDF files
  • Anki Flashcard files for revision
  • No Captcha & No AdSense
  • Advanced Exam Configuration
Get Contributor Access
Question #31
A developer is creating a new mobile application for a company. The application uses REST API and TLS 1.2 to communicate securely with the external back-end server. Due to this configuration, the company is concerned about HTTPS interception attacks.
Which of the following would be the BEST solution against this type of attack?
  1. A
    Cookies
  2. B
    Wildcard certificates
  3. C
    HSTS
  4. D
    Certificate pinning

Correct Answer:
C
Reference:
https://cloud.google.com/security/encryption-in-transit

Question #32
A threat hunting team receives a report about possible APT activity in the network.
Which of the following threat management frameworks should the team implement?
  1. A
    NIST SP 800-53
  2. B
    MITRE ATT&CK
  3. C
    The Cyber Kill Chain
  4. D
    The Diamond Model of Intrusion Analysis

Correct Answer:
A
Reference:
https://nvlpubs.nist.gov/nistpubs/legacy/sp/nistspecialpublication800-30r1.pdf

Question #33
Device event logs sourced from MDM software as follows:

Which of the following security concerns and response actions would BEST address the risks posed by the device in the logs?
  1. A
    Malicious installation of an application; change the MDM configuration to remove application ID 1220.
  2. B
    Resource leak; recover the device for analysis and clean up the local storage.
  3. C
    Impossible travel; disable the device's account and access while investigating.
  4. D
    Falsified status reporting; remotely wipe the device.

Correct Answer:
C

Question #34
An energy company is required to report the average pressure of natural gas used over the past quarter. A PLC sends data to a historian server that creates the required reports.
Which of the following historian server locations will allow the business to get the required reports in an ׀׀¢ and IT environment?
  1. A
    In the ׀׀¢ environment, use a VPN from the IT environment into the ׀׀¢ environment.
  2. B
    In the ׀׀¢ environment, allow IT traffic into the ׀׀¢ environment.
  3. C
    In the IT environment, allow PLCs to send data from the ׀׀¢ environment to the IT environment.
  4. D
    Use a screened subnet between the ׀׀¢ and IT environments.

Correct Answer:
C
chatbot-img GPT-4o - Answer
While option C is marked as the correct answer, suggesting the data flow from OT to IT, it’s important to consider the nuances involved. The placement of the historian server should ideally leverage a method that maintains robust security while allowing necessary data accessibility. Many user comments suggest using a screened subnet (DMZ) between the IT and OT environments. This approach, as per comments focusing on option D, effectively balances security with functionality, providing a controlled buffer zone that restricts direct exposure of the OT environment to potential IT vulnerabilities. It might be worthwhile to reconsider the benefits of structuring network security with a DMZ, especially in infrastructure critical setups like in utility companies where maintaining stringent separation between IT and OT environments is crucial.

Question #35
Which of the following is a benefit of using steganalysis techniques in forensic response?
  1. A
    Breaking a symmetric cipher used in secure voice communications
  2. B
    Determining the frequency of unique attacks against DRM-protected media
  3. C
    Maintaining chain of custody for acquired evidence
  4. D
    Identifying least significant bit encoding of data in a .wav file

Correct Answer:
D
Reference:
https://www.garykessler.net/library/fsc_stego.html

Question #36
A new web server must comply with new secure-by-design principles and PCI DSS. This includes mitigating the risk of an on-path attack. A security analyst is reviewing the following web server configuration:

Which of the following ciphers should the security analyst remove to support the business requirements?
  1. A
    TLS_AES_128_CCM_8_SHA256
  2. B
    TLS_DHE_DSS_WITH_RC4_128_SHA
  3. C
    TLS_CHACHA20_POLY1305_SHA256
  4. D
    TLS_AES_128_GCM_SHA256

Correct Answer:
C

Question #37
A security analyst notices a number of SIEM events that show the following activity:

Which of the following response actions should the analyst take FIRST?
  1. A
    Disable powershell.exe on all Microsoft Windows endpoints.
  2. B
    Restart Microsoft Windows Defender.
  3. C
    Configure the forward proxy to block 40.90.23.154.
  4. D
    Disable local administrator privileges on the endpoints.

Correct Answer:
A

Question #38
A company has hired a third party to develop software as part of its strategy to be quicker to market. The company's policy outlines the following requirements:
✑ The credentials used to publish production software to the container registry should be stored in a secure location.
✑ Access should be restricted to the pipeline service account, without the ability for the third-party developer to read the credentials directly.
Which of the following would be the BEST recommendation for storing and monitoring access to these shared credentials?
  1. A
    TPM
  2. B
    Local secure password file
  3. C
    MFA
  4. D
    Key vault

Correct Answer:
D
Reference:
https://docs.microsoft.com/en-us/windows/security/information-protection/tpm/tpm-fundamentals

Question #39
A business stores personal client data of individuals residing in the EU in order to process requests for mortgage loan approvals.
Which of the following does the business's IT manager need to consider?
  1. A
    The availability of personal data
  2. B
    The right to personal data erasure
  3. C
    The company's annual revenue
  4. D
    The language of the web application

Correct Answer:
B
Reference:
https://gdpr.eu/right-to-be-forgotten/#:~:text=Also%20known%20as%20the%20right,to%20delete%20their%20personal%20data.&text=The%
20General%20Data%20Protection%20Regulation,collected%2C%20processed%2C%20and%20erased

Question #40
A company publishes several APIs for customers and is required to use keys to segregate customer data sets.
Which of the following would be BEST to use to store customer keys?
  1. A
    A trusted platform module
  2. B
    A hardware security module
  3. C
    A localized key store
  4. D
    A public key infrastructure

Correct Answer:
D
Reference:
https://developer.android.com/studio/publish/app-signing

Previous Questions Next Questions

All Pages