CompTIA CompTIA Certifications CAS-002 Questions & Answers

• Question 261:

  Joe, the Chief Executive Officer (CEO), was an Information security professor and a Subject Matter Expert for over 20 years. He has designed a network defense method which he says is significantly better than prominent international

  standards. He has recommended that the company use his cryptographic method.

  Which of the following methodologies should be adopted?

  A. The company should develop an in-house solution and keep the algorithm a secret.

  B. The company should use the CEO's encryption scheme.

  C. The company should use a mixture of both systems to meet minimum standards.

  D. The company should use the method recommended by other respected information security organizations.

  Correct Answer: D

• Question 262:

  Executive management is asking for a new manufacturing control and workflow automation solution. This application will facilitate management of proprietary information and closely guarded corporate trade secrets.

  The information security team has been a part of the department meetings and come away with the following notes:

  -Human resources would like complete access to employee data stored in the application. They would like automated data interchange with the employee management application, a cloud-based SaaS application. -Sales is asking for easy order tracking to facilitate feedback to customers.

  -Legal is asking for adequate safeguards to protect trade secrets. They are also concerned with data ownership questions and legal jurisdiction.

  -Manufacturing is asking for ease of use. Employees working the assembly line cannot be bothered with additional steps or overhead. System interaction needs to be quick and easy.

  -Quality assurance is concerned about managing the end product and tracking overall performance of the product being produced. They would like read-only access to the entire workflow process for monitoring and baselining.

  The favored solution is a user friendly software application that would be hosted onsite. It has extensive ACL functionality, but also has readily available APIs for extensibility. It supports read-only access, kiosk automation, custom fields, and data encryption.

  Which of the following departments' request is in contrast to the favored solution?

  A. Manufacturing

  B. Legal

  C. Sales

  D. Quality assurance

  E. Human resources

  Correct Answer: E

• Question 263:

  A security administrator is investigating the compromise of a SCADA network that is not physically connected to any other network. Which of the following is the MOST likely cause of the compromise?

  A. Outdated antivirus definitions

  B. Insecure wireless

  C. Infected USB device

  D. SQL injection

  Correct Answer: C

• Question 264:

  The Chief Executive Officer (CEO) of a company that allows telecommuting has challenged the Chief Security Officer's (CSO) request to harden the corporate network's perimeter. The CEO argues that the company cannot protect its employees at home, so the risk at work is no different. Which of the following BEST explains why this company should proceed with protecting its corporate network boundary?

  A. The corporate network is the only network that is audited by regulators and customers.

  B. The aggregation of employees on a corporate network makes it a more valuable target for attackers.

  C. Home networks are unknown to attackers and less likely to be targeted directly.

  D. Employees are more likely to be using personal computers for general web browsing when they are at home.

  Correct Answer: B

• Question 265:

  The risk manager is reviewing a report which identifies a requirement to keep a business critical legacy system operational for the next two years. The legacy system is out of support because the vendor and security patches are no longer released. Additionally, this is a proprietary embedded system and little is documented and known about it. Which of the following should the Information Technology department implement to reduce the security risk from a compromise of this system?

  A. Virtualize the system and migrate it to a cloud provider.

  B. Segment the device on its own secure network.

  C. Install an antivirus and HIDS on the system.

  D. Hire developers to reduce vulnerabilities in the code.

  Correct Answer: B

• Question 266:

  An internal committee comprised of the facilities manager, the physical security manager, the network administrator, and a member of the executive team has been formed to address a recent breach at a company's data center. It was discovered that during the breach, an HVAC specialist had gained entry to an area that contained server farms holding sensitive financial data. Although the HVAC specialist was there to fix a legitimate issue, the investigation concluded security be provided for the two entry and exit points for the server farm. Which of the following should be implemented to accomplish the recommendations of the investigation?

  A. Implement a policy that all non-employees should be escorted in the data center.

  B. Place a mantrap at the points with biometric security.

  C. Hire an HVAC person for the company, eliminating the need for external HVAC people.

  D. Implement CCTV cameras at both points.

  Correct Answer: B

• Question 267:

  An organization is finalizing a contract with a managed security services provider (MSSP) that is responsible for primary support of all security technologies. Which of the following should the organization require as part of the contract to ensure the protection of the organization's technology?

  A. An operational level agreement

  B. An interconnection security agreement

  C. A non-disclosure agreement

  D. A service level agreement

  Correct Answer: B

• Question 268:

  A security company is developing a new cloud-based log analytics platform. Its purpose is to allow:

  Customers to upload their log files to the "big data" platform Customers to perform remote log search

  Customers to integrate into the platform using an API so that third party business intelligence tools can be used for the purpose of trending, insights, and/or discovery

  Which of the following are the BEST security considerations to protect data from one customer being disclosed to other customers? (Select THREE).

  A. Secure storage and transmission of API keys

  B. Secure protocols for transmission of log files and search results

  C. At least two years retention of log files in case of e-discovery requests

  D. Multi-tenancy with RBAC support

  E. Sanitizing filters to prevent upload of sensitive log file contents

  F. Encrypted storage of all customer log files

  Correct Answer: ABD

• Question 269:

  The threat abatement program manager tasked the software engineer with identifying the fastest implementation of a hash function to protect passwords with the least number of collisions. Which of the following should the software engineer implement to best meet the requirements?

  A. hash = sha512(password + salt); for (k = 0; k < 4000; k++) { hash = sha512 (hash); }

  B. hash = md5(password + salt); for (k = 0; k < 5000; k++) { hash = md5 (hash); }

  C. hash = sha512(password + salt); for (k = 0; k < 3000; k++) { hash = sha512 (hash + password + salt); }

  D. hash1 = sha1(password + salt); hash = sha1 (hash1);

  Correct Answer: C

• Question 270:

  A developer is determining the best way to improve security within the code being developed. The developer is focusing on input fields where customers enter their credit card details. Which of the following techniques, if implemented in the code, would be the MOST effective in protecting the fields from malformed input?

  A. Client side input validation

  B. Stored procedure

  C. Encrypting credit card details

  D. Regular expression matching

  Correct Answer: D