CompTIA CAS-001 Online Practice Questions and Exam Preparation

CompTIA CAS-001 Online Questions & Answers

• Question 151:

  A system administrator has installed a new Internet facing secure web application that consists of a Linux web server and Windows SQL server into a new corporate site. The administrator wants to place the servers in the most logical network security zones and implement the appropriate security controls.

  Which of the following scenarios BEST accomplishes this goal?

  A. Create an Internet zone, DMZ, and Internal zone on the firewall. Place the web server in the DMZ. Configure IPtables to allow TCP 80 and 443. Set SELinux to permissive. Place the SQL server in the internal zone. Configure the Windows firewall to allow TCP 80 and 443. Configure the Internet zone with ACLs of allow 80 and 443 destination DMZ.
  B. Create an Internet zone, DMZ, and Internal zone on the firewall. Place the web server in the DMZ. Configure IPtables to allow TCP 443. Set enforcement threshold on SELinux to one. Place the SQL server in the internal zone. Configure the Windows firewall to allow TCP 1433 and 1443. Configure the Internet zone with ACLs of allow 443 destination DMZ.
  C. Create an Internet zone and two DMZ zones on the firewall. Place the web server in the DMZ one. Set the enforcement threshold on SELinux to 100, and configure IPtables to allow TCP 80 and 443. Place the SQL server in DMZ two. Configure the Windows firewall to allow TCP 80 and 443. Configure the Internet zone with an ACL of allow 443 destination ANY.
  D. Create an Internet zone and two DMZ zones on the firewall. Place the web server in DMZ one. Set enforcement threshold on SELinux to zero, and configure IPtables to allow TCP 80 and 443. Place the SQL server in DMZ two. Configure the Internet zone ACLs with allow 80, 443, 1433, and 1443 destination ANY.
  B. Create an Internet zone, DMZ, and Internal zone on the firewall. Place the web server in the DMZ. Configure IPtables to allow TCP 443. Set enforcement threshold on SELinux to one. Place the SQL server in the internal zone. Configure the Windows firewall to allow TCP 1433 and 1443. Configure the Internet zone with ACLs of allow 443 destination DMZ.

• Question 152:

  A security administrator wants to verify and improve the security of a business process which is tied to proven company workflow. The security administrator was able to improve security by applying controls that were defined by the newly released company security standard. Such controls included code improvement, transport encryption, and interface restrictions.

  Which of the following can the security administrator do to further increase security after having exhausted all the technical controls dictated by the company's security standard?

  A. Modify the company standard to account for higher security and meet with upper management for approval to implement the new standard.
  B. Conduct a gap analysis and recommend appropriate non-technical mitigating controls, and incorporate the new controls into the standard.
  C. Conduct a risk analysis on all current controls, and recommend appropriate mechanisms to increase overall security.
  D. Modify the company policy to account for higher security, adapt the standard accordingly, and implement new technical controls.
  B. Conduct a gap analysis and recommend appropriate non-technical mitigating controls, and incorporate the new controls into the standard.

• Question 153:

  Company XYZ plans to donate 1,000 used computers to a local school. The company has a large research and development section and some of the computers were previously used to store proprietary research.

  The security administrator is concerned about data remnants on the donated machines, but the company does not have a device sanitization section in the data handling policy.

  Which of the following is the BEST course of action for the security administrator to take?

  A. Delay the donation until a new policy is approved by the Chief Information Officer (CIO), and then donate the machines.
  B. Delay the donation until all storage media on the computers can be sanitized.
  C. Reload the machines with an open source operating system and then donate the machines.
  D. Move forward with the donation, but remove all software license keys from the machines.
  B. Delay the donation until all storage media on the computers can be sanitized.

• Question 154:

  A company provides on-demand virtual computing for a sensitive project. The company implements a fully virtualized datacenter and terminal server access with two-factor authentication for access to sensitive data. The security administrator at the company has uncovered a breach in data confidentiality. Sensitive data was found on a hidden directory within the hypervisor.

  Which of the following has MOST likely occurred?

  A. A stolen two factor token and a memory mapping RAM exploit were used to move data from one virtual guest to an unauthorized similar token.
  B. An employee with administrative access to the virtual guests was able to dump the guest memory onto their mapped disk.
  C. A host server was left un-patched and an attacker was able to use a VMEscape attack to gain unauthorized access.
  D. A virtual guest was left un-patched and an attacker was able to use a privilege escalation attack to gain unauthorized access.
  C. A host server was left un-patched and an attacker was able to use a VMEscape attack to gain unauthorized access.

• Question 155:

  Which of the following potential vulnerabilities exists in the following code snippet?

  var myEmail = document.getElementById("formInputEmail").value; if (xmlhttp.readyState==4 andand xmlhttp.status==200) { Document.getElementById("profileBox").innerHTML = "Emails will be sent to " + myEmail + xmlhttp.responseText; }

  A. Javascript buffer overflow
  B. AJAX XHR weaknesses
  C. DOM-based XSS
  D. JSON weaknesses
  C. DOM-based XSS

• Question 156:

  -- Exhibit -- Exhibit -

  

  Company management has indicated that instant messengers (IM) add to employee productivity. Management would like to implement an IM solution, but does not have a budget for the project. The security engineer creates a feature matrix

  to help decide the most secure product. Click on the Exhibit button.

  Which of the following would the security engineer MOST likely recommend based on the table?

  A. Product A
  B. Product B
  C. Product C
  D. Product D
  C. Product C

• Question 157:

  When attending the latest security conference, an information security administrator noticed only a few people carrying a laptop around. Most other attendees only carried their smartphones. Which of the following would impact the security of conference's resources?

  A. Wireless network security may need to be increased to decrease access of mobile devices.
  B. Physical security may need to be increased to deter or prevent theft of mobile devices.
  C. Network security may need to be increased by reducing the number of available physical network jacks.
  D. Wireless network security may need to be decreased to allow for increased access of mobile devices.
  C. Network security may need to be increased by reducing the number of available physical network jacks.

• Question 158:

  The security administrator at a bank is receiving numerous reports that customers are unable to login to the bank website. Upon further investigation, the security administrator discovers that the name associated with the bank website points to an unauthorized IP address.

  Which of the following solutions will MOST likely mitigate this type of attack?

  A. Security awareness and user training
  B. Recursive DNS from the root servers
  C. Configuring and deploying TSIG
  D. Firewalls and IDS technologies
  C. Configuring and deploying TSIG

• Question 159:

  Unit testing for security functionality and resiliency to attack, as well as developing secure code and exploit mitigation, occur in which of the following phases of the Secure Software Development Lifecycle?

  A. Secure Software Requirements
  B. Secure Software Implementation
  C. Secure Software Design
  D. Software Acceptance
  B. Secure Software Implementation

• Question 160:

  Wireless users are reporting issues with the company's video conferencing and VoIP systems. The security administrator notices DOS attacks on the network that are affecting the company's VoIP system (i.e. premature call drops and garbled call signals). The security administrator also notices that the SIP servers are unavailable during these attacks.

  Which of the following security controls will MOST likely mitigate the VoIP DOS attacks on the network? (Select TWO).

  A. Configure 802.11b on the network
  B. Configure 802.1q on the network
  C. Configure 802.11e on the network
  D. Update the firewall managing the SIP servers
  E. Update the HIDS managing the SIP servers
  C. Configure 802.11e on the network
  D. Update the firewall managing the SIP servers