CompTIA CAS-002 Online Practice Questions and Exam Preparation

CompTIA CAS-002 Online Questions & Answers

• Question 341:

  In a SPML exchange, which of the following BEST describes the three primary roles?

  A. The Provisioning Service Target (PST) entity makes the provisioning request, the Provisioning Service Provider (PSP) responds to the PST requests, and the Provisioning Service Target (PST) performs the provisioning.
  B. The Provisioning Service Provider (PSP) entity makes the provisioning request, the Provisioning Service Target (PST) responds to the PSP requests, and the Provisioning Service Provider (PSP) performs the provisioning.
  C. The Request Authority (RA) entity makes the provisioning request, the Provisioning Service Target (PST) responds to the RA requests, and the Provisioning Service Provider (PSP) performs the provisioning.
  D. The Request Authority (RA) entity makes the provisioning request, the Provisioning Service Provider (PSP) responds to the RA requests, and the Provisioning Service Target (PST) performs the provisioning.
  D. The Request Authority (RA) entity makes the provisioning request, the Provisioning Service Provider (PSP) responds to the RA requests, and the Provisioning Service Target (PST) performs the provisioning.

• Question 342:

  A team is established to create a secure connection between software packages in order to list employee's remaining or unused benefits on their paycheck stubs. Which of the following business roles would be MOST effective on this team?

  A. Network Administrator, Database Administrator, Programmers
  B. Network Administrator, Emergency Response Team, Human Resources
  C. Finance Officer, Human Resources, Security Administrator
  D. Database Administrator, Facilities Manager, Physical Security Manager
  C. Finance Officer, Human Resources, Security Administrator

• Question 343:

  A recently hired security administrator is advising developers about the secure integration of a legacy in- house application with a new cloud based processing system. The systems must exchange large amounts of fixed format data such as names, addresses, and phone numbers, as well as occasional chunks of data in unpredictable formats. The developers want to construct a new data format and create custom tools to parse and process the data. The security administrator instead suggests that the developers:

  A. Create a custom standard to define the data.
  B. Use well formed standard compliant XML and strict schemas.
  C. Only document the data format in the parsing application code.
  D. Implement a de facto corporate standard for all analyzed data.
  B. Use well formed standard compliant XML and strict schemas.

• Question 344:

  The Information Security Officer (ISO) believes that the company has been targeted by cybercriminals and it is under a cyber attack. Internal services that are normally available to the public via the Internet are inaccessible, and employees in the office are unable to browse the Internet. The senior security engineer starts by reviewing the bandwidth at the border router, and notices that the incoming bandwidth on the router's external interface is maxed out. The security engineer then inspects the following piece of log to try and determine the reason for the downtime, focusing on the company's external router's IP which is 128.20.176.19: 11:16:22.110343 IP 90.237.31.27.19 > 128.20.176.19.19: UDP, length 1400

  11:16:22.110351 IP 23.27.112.200.19 > 128.20.176.19.19: UDP, length 1400 11:16:22.110358 IP 192.200.132.213.19 > 128.20.176.19.19: UDP, length 1400 11:16:22.110402 IP 70.192.2.55.19 > 128.20.176.19.19: UDP, length 1400 11:16:22.110406 IP 112.201.7.39.19 > 128.20.176.19.19: UDP, length 1400 Which of the following describes the findings the senior security engineer should report to the ISO and the BEST solution for service restoration?

  A. After the senior engineer used a network analyzer to identify an active Fraggle attack, the company's ISP should be contacted and instructed to block the malicious packets.
  B. After the senior engineer used the above IPS logs to detect the ongoing DDOS attack, an IPS filter should be enabled to block the attack and restore communication.
  C. After the senior engineer used a mirror port to capture the ongoing amplification attack, a BGP sinkhole should be configured to drop traffic at the source networks.
  D. After the senior engineer used a packet capture to identify an active Smurf attack, an ACL should be placed on the company's external router to block incoming UDP port 19 traffic.
  A. After the senior engineer used a network analyzer to identify an active Fraggle attack, the company's ISP should be contacted and instructed to block the malicious packets.

• Question 345:

  The root cause analysis of a recent security incident reveals that an attacker accessed a printer from the Internet. The attacker then accessed the print server, using the printer as a launch pad for a shell exploit. The print server logs show that the attacker was able to exploit multiple accounts, ultimately launching a successful DoS attack on the domain controller.

  Defending against which of the following attacks should form the basis of the incident mitigation plan?

  A. DDoS
  B. SYN flood
  C. Buffer overflow
  D. Privilege escalation
  D. Privilege escalation

• Question 346:

  A Chief Financial Officer (CFO) has raised concerns with the Chief Information Security Officer (CISO) because money has been spent on IT security infrastructure, but corporate assets are still found to be vulnerable. The business recently funded a patch management product and SOE hardening initiative. A third party auditor reported findings against the business because some systems were missing patches. Which of the following statements BEST describes this situation?

  A. The CFO is at fault because they are responsible for patching the systems and have already been given patch management and SOE hardening products.
  B. The audit findings are invalid because remedial steps have already been applied to patch servers and the remediation takes time to complete.
  C. The CISO has not selected the correct controls and the audit findings should be assigned to them instead of the CFO.
  D. Security controls are generally never 100% effective and gaps should be explained to stakeholders and managed accordingly.
  D. Security controls are generally never 100% effective and gaps should be explained to stakeholders and managed accordingly.

• Question 347:

  A newly-hired Chief Information Security Officer (CISO) is faced with improving security for a company with low morale and numerous disgruntled employees. After reviewing the situation for several weeks the CISO publishes a more comprehensive security policy with associated standards. Which of the following issues could be addressed through the use of technical controls specified in the new security policy?

  A. Employees publishing negative information and stories about company management on social network sites and blogs.
  B. An employee remotely configuring the email server at a relative's company during work hours.
  C. Employees posting negative comments about the company from personal phones and PDAs.
  D. External parties cloning some of the company's externally facing web pages and creating look-alike sites.
  B. An employee remotely configuring the email server at a relative's company during work hours.

• Question 348:

  A security engineer has inherited an authentication project which integrates 1024-bit PKI certificates into the company infrastructure and now has a new requirement to integrate 2048-bit PKI certificates so that the entire company will be interoperable with its vendors when the project is completed. The project is now 25% complete, with 15% of the company staff being issued 1024-bit certificates. The provisioning of network based accounts has not occurred yet due to other project delays. The project is now expected to be over budget and behind its original schedule. Termination of the existing project and beginning a new project is a consideration because of the change in scope. Which of the following is the security engineer's MOST serious concern with implementing this solution?

  A. Succession planning
  B. Performance
  C. Maintainability
  D. Availability
  C. Maintainability

• Question 349:

  An organization has just released a new mobile application for its customers. The application has an inbuilt browser and native application to render content from existing websites and the organization's new web services gateway. All rendering of the content is performed on the mobile application.

  The application requires SSO between the application, the web services gateway and legacy UI. Which of the following controls MUST be implemented to securely enable SSO?

  A. A registration process is implemented to have a random number stored on the client.
  B. The identity is passed between the applications as a HTTP header over REST.
  C. Local storage of the authenticated token on the mobile application is secured.
  D. Attestation of the XACML payload to ensure that the client is authorized.
  C. Local storage of the authenticated token on the mobile application is secured.

• Question 350:

  The lead systems architect on a software development project developed a design which is optimized for a distributed computing environment. The security architect assigned to the project has concerns about the integrity of the system, if it is deployed in a commercial cloud. Due to poor communication within the team, the security risks of the proposed design are not being given any attention. A network engineer on the project has a security background and is concerned about the overall success of the project. Which of the following is the BEST course of action for the network engineer to take?

  A. Address the security concerns through the network design and security controls.
  B. Implement mitigations to the security risks and address the poor communications on the team with the project manager.
  C. Document mitigations to the security concerns and facilitate a meeting between the architects and the project manager.
  D. Develop a proposal for an alternative architecture that does not leverage cloud computing and present it to the lead architect.
  C. Document mitigations to the security concerns and facilitate a meeting between the architects and the project manager.