CompTIA CAS-002 Online Practice Questions and Exam Preparation

CompTIA CAS-002 Online Questions & Answers

• Question 211:

  A healthcare company recently purchased the building next door located on the same campus. The building previously did not have any IT infrastructure. The building manager has selected four potential locations to place IT equipment consisting of a half height open server rack with five switches, a router, a firewall, and two servers. Given the descriptions below, where would the security engineer MOST likely recommend placing the rack? The Boiler Room: The rack can be placed 5 feet (1.5 meters) up on the wall, between the second and third boiler. The room is locked and only maintenance has access to it. The Reception AreA. The reception area is an open area right as customers enter. There is a closet 5 feet by 5 feet (1.5 meters by 1.5 meters) that the rack will be placed in with floor mounts. There is a 3 digit PIN lock that the receptionist sets. The Rehabilitation AreA. The rack needs to be out of the way from patients using the whirlpool bath, so it will be wall mounted 8 feet (2.4 meters) up as the area has high ceilings. The rehab area is staffed full time and admittance is by key card only. The Finance AreA. There is an unused office in the corner of the area that can be used for the server rack. The rack will be floor mounted. The finance area is locked and alarmed at night.

  A. The Rehabilitation Area
  B. The Reception Area
  C. The Boiler Room
  D. The Finance Area
  D. The Finance Area

• Question 212:

  A vulnerability scanner report shows that a client-server host monitoring solution operating in the credit card corporate environment is managing SSL sessions with a weak algorithm which does not meet corporate policy. Which of the following are true statements? (Select TWO).

  A. The X509 V3 certificate was issued by a non trusted public CA.
  B. The client-server handshake could not negotiate strong ciphers.
  C. The client-server handshake is configured with a wrong priority.
  D. The client-server handshake is based on TLS authentication.
  E. The X509 V3 certificate is expired.
  F. The client-server implements client-server mutual authentication with different certificates.
  B. The client-server handshake could not negotiate strong ciphers.
  C. The client-server handshake is configured with a wrong priority.

• Question 213:

  A security code reviewer has been engaged to manually review a legacy application. A number of systemic issues have been uncovered relating to buffer overflows and format string vulnerabilities.

  The reviewer has advised that future software projects utilize managed code platforms if at all possible.

  Which of the following languages would suit this recommendation? (Select TWO).

  A. C
  B. C#
  C. C++
  D. Perl
  E. Java
  B. C#
  E. Java

• Question 214:

  As a cost saving measure, a company has instructed the security engineering team to allow all consumer devices to be able to access the network. They have asked for recommendations on what is needed to secure the enterprise, yet offer the most flexibility in terms of controlling applications, and stolen devices. Which of the following is BEST suited for the requirements?

  A. MEAP with Enterprise Appstore
  B. Enterprise Appstore with client-side VPN software
  C. MEAP with TLS
  D. MEAP with MDM
  D. MEAP with MDM

• Question 215:

  Company ABC has a 100Mbps fiber connection from headquarters to a remote office 200km (123 miles) away. This connection is provided by the local cable television company. ABC would like to extend a secure VLAN to the remote office, but the cable company says this is impossible since they already use VLANs on their internal network. Which of the following protocols should the cable company be using to allow their customers to establish VLANs to other sites?

  A. IS-IS
  B. EIGRP
  C. MPLS
  D. 802.1q
  C. MPLS

• Question 216:

  A number of security incidents have been reported involving mobile web-based code developed by a consulting company. Performing a root cause analysis, the security administrator of the consulting company discovers that the problem is a simple programming error that results in extra information being loaded into the memory when the proper format is selected by the user. After repeating the process several times, the security administrator is able to execute unintentional instructions through this method. Which of the following BEST describes the problem that is occurring, a good mitigation technique to use to prevent future occurrences, and why it a security concern?

  A. Problem: Cross-site scripting Mitigation Technique. Input validation Security Concern: Decreases the company's profits and cross-site scripting can enable malicious actors to compromise the confidentiality of network connections or interrupt the availability of the network.
  B. Problem: Buffer overflow Mitigation Technique: Secure coding standards Security Concern: Exposes the company to liability buffer overflows and can enable malicious actors to compromise the confidentiality/availability of the data.
  C. Problem: SQL injection Mitigation Technique: Secure coding standards Security Concern: Exposes the company to liability SQL injection and can enable malicious actors to compromise the confidentiality of data or interrupt the availability of a system.
  D. Problem: Buffer overflow Mitigation Technique: Output validation Security Concern: Exposing the company to public scrutiny buffer overflows can enable malicious actors to interrupt the availability of a system.
  B. Problem: Buffer overflow Mitigation Technique: Secure coding standards Security Concern: Exposes the company to liability buffer overflows and can enable malicious actors to compromise the confidentiality/availability of the data.

• Question 217:

  An organization has decided to reduce labor costs by outsourcing back office processing of credit applications to a provider located in another country. Data sovereignty and privacy concerns raised by the security team resulted in the third-party provider only accessing and processing the data via remote desktop sessions. To facilitate communications and improve productivity, staff at the third party has been provided with corporate email accounts that are only accessible via the remote desktop sessions. Email forwarding is blocked and staff at the third party can only communicate with staff within the organization. Which of the following additional controls should be implemented to prevent data loss? (Select THREE).

  A. Implement hashing of data in transit
  B. Session recording and capture
  C. Disable cross session cut and paste
  D. Monitor approved credit accounts
  E. User access audit reviews
  F. Source IP whitelisting
  C. Disable cross session cut and paste
  E. User access audit reviews
  F. Source IP whitelisting

• Question 218:

  The senior security administrator wants to redesign the company DMZ to minimize the risks associated with both external and internal threats. The DMZ design must support security in depth, change management and configuration processes, and support incident reconstruction. Which of the following designs BEST supports the given requirements?

  A. A dual firewall DMZ with remote logging where each firewall is managed by a separate administrator.
  B. A single firewall DMZ where each firewall interface is managed by a separate administrator and logging to the cloud.
  C. A SaaS based firewall which logs to the company's local storage via SSL, and is managed by the change control team.
  D. A virtualized firewall, where each virtual instance is managed by a separate administrator and logging to the same hardware.
  A. A dual firewall DMZ with remote logging where each firewall is managed by a separate administrator.

• Question 219:

  Joe, a hacker, has discovered he can specifically craft a webpage that when viewed in a browser crashes the browser and then allows him to gain remote code execution in the context of the victim's privilege level. The browser crashes due to an exception error when a heap memory that is unused is accessed. Which of the following BEST describes the application issue?

  A. Integer overflow
  B. Click-jacking
  C. Race condition
  D. SQL injection
  E. Use after free
  F. Input validation
  E. Use after free

• Question 220:

  The security administrator is worried about possible SPIT attacks against the VoIP system.

  Which of the following security controls would MOST likely need to be implemented to detect this type of attack?

  A. SIP and SRTP traffic analysis
  B. QoS audit on Layer 3 devices
  C. IP and MAC filtering logs
  D. Email spam filter log
  A. SIP and SRTP traffic analysis