CompTIA CAS-002 Online Practice Questions and Exam Preparation

CompTIA CAS-002 Online Questions & Answers

• Question 731:

  A security engineer is a new member to a configuration board at the request of management. The company has two new major IT projects starting this year and wants to plan security into the application deployment. The board is primarily concerned with the applications' compliance with federal assessment and authorization standards. The security engineer asks for a timeline to determine when a security assessment of both applications should occur and does not attend subsequent configuration board meetings. If the security engineer is only going to perform a security assessment, which of the following steps in system authorization has the security engineer omitted? (Select TWO).

  A. Establish the security control baseline to be assessed
  B. Build the application according to software development security standards
  C. Write the systems functionality requirements into the security requirements traceability matrix
  D. Review the results of user acceptance testing
  E. Categorize the applications according to use
  F. Consult with the stakeholders to determine which standards can be omitted
  A. Establish the security control baseline to be assessed
  E. Categorize the applications according to use

• Question 732:

  A system administrator needs to develop a policy for when an application server is no longer needed. Which of the following policies would need to be developed?

  A. Backup policy
  B. De-provisioning policy
  C. Data retention policy
  D. Provisioning policy
  C. Data retention policy

• Question 733:

  A company has a legacy virtual cluster which was added to the datacenter after a small company was acquired. All VMs on the cluster use the same virtual network interface to connect to the corporate data center LAN. Some of the virtual machines on the cluster process customer data, some process company financial data, and others act as externally facing web servers. Which of the following security risks can result from the configuration in this scenario?

  A. Visibility on the traffic between the virtual machines can impact confidentiality
  B. NIC utilization can exceed 50 percent and impact availability
  C. Shared virtual switches can negatively impact the integrity of network packets
  D. Additional overhead from network bridging can affect availability
  A. Visibility on the traffic between the virtual machines can impact confidentiality