CompTIA CompTIA Certifications CAS-002 Questions & Answers

• Question 421:

  VPN users cannot access the active FTP server through the router but can access any server in the data center.

  Additional network information:

  DMZ network -192.168.5.0/24 (FTP server is 192.168.5.11)

  VPN network -192.168.1.0/24

  Datacenter -192.168.2.0/24

  User network - 192.168.3.0/24

  HR network -192.168.4.0/24\

  Traffic shaper configuration:

  VLAN Bandwidth Limit (Mbps)

  VPN50

  User175

  HR250

  Finance250

  Guest0

  Router ACL:

  ActionSourceDestination

  Permit192.168.1.0/24192.168.2.0/24

  Permit192.168.1.0/24192.168.3.0/24

  Permit192.168.1.0/24192.168.5.0/24

  Permit192.168.2.0/24192.168.1.0/24

  Permit192.168.3.0/24192.168.1.0/24

  Permit192.168.5.1/32192.168.1.0/24

  Deny192.168.4.0/24192.168.1.0/24

  Deny192.168.1.0/24192.168.4.0/24

  Denyanyany

  Which of the following solutions would allow the users to access the active FTP server?

  A. Add a permit statement to allow traffic from 192.168.5.0/24 to the VPN network

  B. Add a permit statement to allow traffic to 192.168.5.1 from the VPN network

  C. IPS is blocking traffic and needs to be reconfigured

  D. Configure the traffic shaper to limit DMZ traffic

  E. Increase bandwidth limit on the VPN network

  Correct Answer: A

• Question 422:

  Company ABC is hiring customer service representatives from Company XYZ. The representatives reside at Company XYZ's headquarters. Which of the following BEST prevents Company XYZ representatives from gaining access to unauthorized Company ABC systems?

  A. Require each Company XYZ employee to use an IPSec connection to the required systems

  B. Require Company XYZ employees to establish an encrypted VDI session to the required systems

  C. Require Company ABC employees to use two-factor authentication on the required systems

  D. Require a site-to-site VPN for intercompany communications

  Correct Answer: B

• Question 423:

  An educational institution would like to make computer labs available to remote students. The labs are used for various IT networking, security, and programming courses. The requirements are:

  1.

  Each lab must be on a separate network segment.

  2.

  Labs must have access to the Internet, but not other lab networks.

  3.

  Student devices must have network access, not simple access to hosts on the lab networks.

  4.

  Students must have a private certificate installed before gaining access.

  5.

  Servers must have a private certificate installed locally to provide assurance to the students.

  6.

  All students must use the same VPN connection profile.

  Which of the following components should be used to achieve the design in conjunction with directory services?

  A. L2TP VPN over TLS for remote connectivity, SAML for federated authentication, firewalls between each lab segment

  B. SSL VPN for remote connectivity, directory services groups for each lab group, ACLs on routing equipment

  C. IPSec VPN with mutual authentication for remote connectivity, RADIUS for authentication, ACLs on network equipment

  D. Cloud service remote access tool for remote connectivity, OAuth for authentication, ACL on routing equipment

  Correct Answer: C

• Question 424:

  An organization has several production critical SCADA supervisory systems that cannot follow the normal 30-day patching policy. Which of the following BEST maximizes the protection of these systems from malicious software?

  A. Configure a firewall with deep packet inspection that restricts traffic to the systems

  B. Configure a separate zone for the systems and restrict access to known ports

  C. Configure the systems to ensure only necessary applications are able to run

  D. Configure the host firewall to ensure only the necessary applications have listening ports

  Correct Answer: C

• Question 425:

  An international shipping company discovered that deliveries left idle are being tampered with. The company wants to reduce the idle time associated with international deliveries by ensuring that personnel are automatically notified when an inbound delivery arrives at the transit dock. Which of the following should be implemented to help the company increase the security posture of its operations?

  A. Back office database

  B. Asset tracking

  C. Geo-fencing

  D. Barcode scanner

  Correct Answer: C

• Question 426:

  Joe, a penetration tester, is tasked with testing the security robustness of the protocol between a mobile web application and a RESTful application server. Which of the following security tools would be required to assess the security between the mobile web application and the RESTful application server? (Select TWO).

  A. Jailbroken mobile device

  B. Reconnaissance tools

  C. Network enumerator

  D. HTTP interceptor

  E. Vulnerability scanner

  F. Password cracker

  Correct Answer: DE

• Question 427:

  A recently hired security administrator is advising developers about the secure integration of a legacy in- house application with a new cloud based processing system. The systems must exchange large amounts of fixed format data such as names, addresses, and phone numbers, as well as occasional chunks of data in unpredictable formats. The developers want to construct a new data format and create custom tools to parse and process the data. The security administrator instead suggests that the developers:

  A. Create a custom standard to define the data.

  B. Use well formed standard compliant XML and strict schemas.

  C. Only document the data format in the parsing application code.

  D. Implement a de facto corporate standard for all analyzed data.

  Correct Answer: B

• Question 428:

  In a situation where data is to be recovered from an attacker's location, which of the following are the FIRST things to capture? (Select TWO).

  A. Removable media

  B. Passwords written on scrap paper

  C. Snapshots of data on the monitor

  D. Documents on the printer

  E. Volatile system memory

  F. System hard drive

  Correct Answer: CE

• Question 429:

  Company XYZ provides cable television service to several regional areas. They are currently installing fiber-to-the-home in many areas with hopes of also providing telephone and Internet services. The telephone and Internet services portions of the company will each be separate subsidiaries of the parent company. The board of directors wishes to keep the subsidiaries separate from the parent company. However all three companies must share customer data for the purposes of accounting, billing, and customer authentication. The solution must use open standards, and be simple and seamless for customers, while only sharing minimal data between the companies. Which of the following solutions is BEST suited for this scenario?

  A. The companies should federate, with the parent becoming the SP, and the subsidiaries becoming an IdP.

  B. The companies should federate, with the parent becoming the IdP, and the subsidiaries becoming an SSP.

  C. The companies should federate, with the parent becoming the IdP, and the subsidiaries becoming an SP.

  D. The companies should federate, with the parent becoming the ASP, and the subsidiaries becoming an IdP.

  Correct Answer: C

• Question 430:

  A member of the software development team has requested advice from the security team to implement a new secure lab for testing malware. Which of the following is the NEXT step that the security team should take?

  A. Purchase new hardware to keep the malware isolated.

  B. Develop a policy to outline what will be required in the secure lab.

  C. Construct a series of VMs to host the malware environment.

  D. Create a proposal and present it to management for approval.

  Correct Answer: D