CompTIA CAS-002 Online Practice Questions and Exam Preparation

CompTIA CAS-002 Online Questions & Answers

• Question 41:

  The IT department of a large telecommunications company has developed and finalized a set of security solutions and policies which have been approved by upper management for deployment within the company. During the development of the security solutions and policies, the FIRST thing the IT department should have done was:

  A. contact vendor management so the RFI and RFP process can be started as soon as possible.
  B. contact an independent consultant who can tell them what policies and solutions they need.
  C. discuss requirements with stakeholders from the various internal departments.
  D. involve facilities management early in the project so they can plan for the new security hardware in the data center.
  C. discuss requirements with stakeholders from the various internal departments.

• Question 42:

  The technology steering committee is struggling with increased requirements stemming from an increase in telecommuting. The organization has not addressed telecommuting in the past. The implementation of a new SSL-VPN and a VOIP phone solution enables personnel to work from remote locations with corporate assets. Which of the following steps must the committee take FIRST to outline senior management's directives?

  A. Develop an information classification scheme that will properly secure data on corporate systems.
  B. Implement database views and constrained interfaces so remote users will be unable to access PII from personal equipment.
  C. Publish a policy that addresses the security requirements for working remotely with company equipment.
  D. Work with mid-level managers to identify and document the proper procedures for telecommuting.
  C. Publish a policy that addresses the security requirements for working remotely with company equipment.

• Question 43:

  The security administrator at `company.com' is reviewing the network logs and notices a new UDP port pattern where the amount of UDP port 123 packets has increased by 20% above the baseline. The administrator runs a packet capturing tool from a server attached to a SPAN port and notices the following. UDP 192.168.0.1:123 -> 172.60.3.0:123 UDP 192.168.0.36:123 -> time.company.com UDP 192.168.0.112:123 -> 172.60.3.0:123 UDP 192.168.0.91:123 -> time.company.com UDP 192.168.0.211:123 -> 172.60.3.0:123 UDP 192.168.0.237:123 -> time.company.com UDP 192.168.0.78:123 -> 172.60.3.0:123

  The corporate HIPS console reports an MD5 hash mismatch on the svchost.exe file of the following computers:

  192.168.0.1

  192.168.0.112

  192.168.0.211

  192.168.0.78

  Which of the following should the security administrator report to upper management based on the above output?

  A. An NTP client side attack successfully exploited some hosts.
  B. A DNS cache poisoning successfully exploited some hosts.
  C. An NTP server side attack successfully exploited some hosts.
  D. A DNS server side attack successfully exploited some hosts.
  A. An NTP client side attack successfully exploited some hosts.

• Question 44:

  Due to a new regulatory requirement, ABC Company must now encrypt all WAN transmissions. When speaking with the network administrator, the security administrator learns that the existing routers have the minimum processing power to do the required level of encryption. Which of the following solutions minimizes the performance impact on the router?

  A. Deploy inline network encryption devices
  B. Install an SSL acceleration appliance
  C. Require all core business applications to use encryption
  D. Add an encryption module to the router and configure IPSec
  A. Deploy inline network encryption devices

• Question 45:

  The Chief Information Officer (CIO) is reviewing the IT centric BIA and RA documentation. The documentation shows that a single 24 hours downtime in a critical business function will cost the business $2.3 million. Additionally, the business unit which depends on the critical business function has determined that there is a high probability that a threat will materialize based on historical data. The CIO's budget does not allow for full system hardware replacement in case of a catastrophic failure, nor does it allow for the purchase of additional compensating controls. Which of the following should the CIO recommend to the finance director to minimize financial loss?

  A. The company should mitigate the risk.
  B. The company should transfer the risk.
  C. The company should avoid the risk.
  D. The company should accept the risk.
  B. The company should transfer the risk.

• Question 46:

  The Chief Information Security Officer (CISO) at a company knows that many users store business documents on public cloud-based storage, and realizes this is a risk to the company. In response, the CISO implements a mandatory training course in which all employees are instructed on the proper use of cloud-based storage. Which of the following risk strategies did the CISO implement?

  A. Avoid
  B. Accept
  C. Mitigate
  D. Transfer
  C. Mitigate

• Question 47:

  A security analyst has been asked to develop a quantitative risk analysis and risk assessment for the company's online shopping application. Based on heuristic information from the Security Operations Center (SOC), a Denial of Service Attack (DoS) has been successfully executed 5 times a year. The Business Operations department has determined the loss associated to each attack is $40,000. After implementing application caching, the number of DoS attacks was reduced to one time a year. The cost of the countermeasures was $100,000. Which of the following is the monetary value earned during the first year of operation?

  A. $60,000
  B. $100,000
  C. $140,000
  D. $200,000
  A. $60,000

• Question 48:

  The Chief Executive Officer (CEO) of a corporation purchased the latest mobile device and wants to connect it to the internal network. The Chief Information Security Officer (CISO) was told to research and recommend how to secure this device.

  Which of the following should be implemented, keeping in mind that the CEO has stated that this access is required?

  A. Mitigate and Transfer
  B. Accept and Transfer
  C. Transfer and Avoid
  D. Avoid and Mitigate
  A. Mitigate and Transfer

• Question 49:

  To prevent a third party from identifying a specific user as having previously accessed a service provider through an SSO operation, SAML uses which of the following?

  A. Transient identifiers
  B. SOAP calls
  C. Discovery profiles
  D. Security bindings
  A. Transient identifiers

• Question 50:

  An administrator is implementing a new network-based storage device. In selecting a storage protocol, the administrator would like the data in transit's integrity to be the most important concern. Which of the following protocols meets these needs by implementing either AES-CMAC or HMAC-SHA256 to sign data?

  A. SMB
  B. NFS
  C. FCoE
  D. iSCSI
  A. SMB