CompTIA CAS-002 Online Practice Questions and Exam Preparation

CompTIA CAS-002 Online Questions & Answers

• Question 151:

  A company has adopted a BYOD program. The company would like to protect confidential information. However, it has been decided that when an employee leaves, the company will not completely wipe the personal device. Which of the following would MOST likely help the company maintain security when employees leave?

  A. Require cloud storage on corporate servers and disable access upon termination
  B. Whitelist access to only non-confidential information
  C. Utilize an MDM solution with containerization
  D. Require that devices not have local storage
  C. Utilize an MDM solution with containerization

• Question 152:

  Two separate companies are in the process of integrating their authentication infrastructure into a unified single sign-on system. Currently, both companies use an AD backend and two factor authentication using TOTP. The system administrators have configured a trust relationship between the authentication backend to ensure proper process flow. How should the employees request access to shared resources before the authentication integration is complete?

  A. They should logon to the system using the username concatenated with the 6-digit code and their original password.
  B. They should logon to the system using the newly assigned global username: first.lastname#### where #### is the second factor code.
  C. They should use the username format: LAN\first.lastname together with their original password and the next 6-digit code displayed when the token button is depressed.
  D. They should use the username format: [email protected], together with a password and their 6-digit code.
  D. They should use the username format: [email protected], together with a password and their 6-digit code.

• Question 153:

  On Monday, the Chief Information Officer (CIO) of a state agency received an e-discovery request for the release of all emails sent and received by the agency board of directors for the past five years. The CIO has contacted the email administrator and asked the administrator to provide the requested information by end of day on Friday. Which of the following has the GREATEST impact on the ability to fulfill the e- discovery request?

  A. Data retention policy
  B. Backup software and hardware
  C. Email encryption software
  D. Data recovery procedures
  A. Data retention policy

• Question 154:

  News outlets are beginning to report on a number of retail establishments that are experiencing payment card data breaches. The data exfiltration is enabled by malware on a compromised computer. After the initial exploit network mapping and fingerprinting occurs in preparation for further exploitation. Which of the following is the MOST effective solution to protect against unrecognized malware infections, reduce detection time, and minimize any damage that might be done?

  A. Remove local admin permissions from all users and change anti-virus to a cloud aware, push technology.
  B. Implement an application whitelist at all levels of the organization.
  C. Deploy a network based heuristic IDS, configure all layer 3 switches to feed data to the IDS for more effective monitoring.
  D. Update router configuration to pass all network traffic through a new proxy server with advanced malware detection.
  B. Implement an application whitelist at all levels of the organization.

• Question 155:

  A company recently experienced a malware outbreak. It was caused by a vendor using an approved non- company device on the company's corporate network that impacted manufacturing lines, causing a week of downtime to recover from the attack.

  Which of the following reduces this threat and minimizes potential impact on the manufacturing lines?

  A. Disable remote access capabilities on manufacturing SCADA systems.
  B. Require a NIPS for all communications to and from manufacturing SCADA systems.
  C. Add anti-virus and client firewall capabilities to the manufacturing SCADA systems.
  D. Deploy an ACL that restricts access from the corporate network to the manufacturing SCADA systems.
  D. Deploy an ACL that restricts access from the corporate network to the manufacturing SCADA systems.

• Question 156:

  SDLC is being used for the commissioning of a new platform. To provide an appropriate level of assurance the security requirements that were specified at the project origin need to be carried through to implementation. Which of the following would BEST help to determine if this occurred?

  A. Requirements workshop
  B. Security development lifecycle (SDL)
  C. Security requirements traceability matrix (SRTM)
  D. Secure code review and penetration test
  C. Security requirements traceability matrix (SRTM)

• Question 157:

  Joe, a hacker, has discovered he can specifically craft a webpage that when viewed in a browser crashes the browser and then allows him to gain remote code execution in the context of the victim's privilege level. The browser crashes due to an exception error when a heap memory that is unused is accessed. Which of the following BEST describes the application issue?

  A. Integer overflow
  B. Click-jacking
  C. Race condition
  D. SQL injection
  E. Use after free
  F. Input validation
  E. Use after free

• Question 158:

  A programming team is deploying a new PHP module to be run on a Solaris 10 server with trusted extensions. The server is configured with three zones, a management zone, a customer zone, and a backend zone. The security model is constructed so that only programs in the management zone can communicate data between the zones. After installation of the new PHP module, which handles on-line customer payments, it is not functioning correctly. Which of the following is the MOST likely cause of this problem?

  A. The PHP module is written to transfer data from the customer zone to the management zone, and then from the management zone to the backend zone.
  B. The iptables configuration is not configured correctly to permit zone to zone communications between the customer and backend zones.
  C. The PHP module was installed in the management zone, but is trying to call a routine in the customer zone to transfer data directly to a MySQL database in the backend zone.
  D. The ipfilters configuration is configured to disallow loopback traffic between the physical NICs associated with each zone.
  C. The PHP module was installed in the management zone, but is trying to call a routine in the customer zone to transfer data directly to a MySQL database in the backend zone.

• Question 159:

  A security company is developing a new cloud-based log analytics platform. Its purpose is to allow:

  Customers to upload their log files to the "big data" platform Customers to perform remote log search Customers to integrate into the platform using an API so that third party business intelligence tools can be used for the purpose of trending,

  insights, and/or discovery

  Which of the following are the BEST security considerations to protect data from one customer being disclosed to other customers? (Select THREE).

  A. Secure storage and transmission of API keys
  B. Secure protocols for transmission of log files and search results
  C. At least two years retention of log files in case of e-discovery requests
  D. Multi-tenancy with RBAC support
  E. Sanitizing filters to prevent upload of sensitive log file contents
  F. Encryption of logical volumes on which the customers' log files reside
  A. Secure storage and transmission of API keys
  B. Secure protocols for transmission of log files and search results
  D. Multi-tenancy with RBAC support

• Question 160:

  An organization recently upgraded its wireless infrastructure to support WPA2 and requires all clients to use this method. After the upgrade, several critical wireless clients fail to connect because they are only WEP compliant. For the foreseeable future, none of the affected clients have an upgrade path to put them into compliance with the WPA2 requirement. Which of the following provides the MOST secure method of integrating the non-compliant clients into the network?

  A. Create a separate SSID and WEP key to support the legacy clients and enable detection of rogue APs.
  B. Create a separate SSID and WEP key on a new network segment and only allow required communication paths.
  C. Create a separate SSID and require the legacy clients to connect to the wireless network using certificate-based 802.1x.
  D. Create a separate SSID and require the use of dynamic WEP keys.
  B. Create a separate SSID and WEP key on a new network segment and only allow required communication paths.