CompTIA CAS-002 Online Practice Questions and Exam Preparation

CompTIA CAS-002 Online Questions & Answers

• Question 71:

  The firm's CISO has been working with the Chief Procurement Officer (CPO) and the Senior Project Manager (SPM) on soliciting bids for a series of HIPS and NIPS products for a major installation in the firm's new Hong Kong office. After reviewing RFQs received from three vendors, the CPO and the SPM have not gained any real data regarding the specifications about any of the solutions and want that data before the procurement continues. Which of the following will the CPO and SPM have the CISO do at this point to get back on track in this procurement process?

  A. Ask the three submitting vendors for a full blown RFP so that the CPO and SPM can move to the next step.
  B. Contact the three submitting vendor firms and have them submit supporting RFIs to provide more detailed information about their product solutions.
  C. Provide the CPO and the SPM a personalized summary from what the CISO knows about these three submitting vendors.
  D. Inform the three submitting vendors that there quotes are null and void at this time and that they are disqualified based upon their RFQs.
  B. Contact the three submitting vendor firms and have them submit supporting RFIs to provide more detailed information about their product solutions.

• Question 72:

  Executive management is asking for a new manufacturing control and workflow automation solution. This application will facilitate management of proprietary information and closely guarded corporate trade secrets.

  The information security team has been a part of the department meetings and come away with the following notes:

  -Human resources would like complete access to employee data stored in the application. They would like automated data interchange with the employee management application, a cloud-based SaaS application.

  -Sales is asking for easy order tracking to facilitate feedback to customers.

  -Legal is asking for adequate safeguards to protect trade secrets. They are also concerned with data ownership questions and legal jurisdiction.

  -Manufacturing is asking for ease of use. Employees working the assembly line cannot be bothered with additional steps or overhead. System interaction needs to be quick and easy.

  -Quality assurance is concerned about managing the end product and tracking overall performance of the product being produced. They would like read-only access to the entire workflow process for monitoring and baselining.

  The favored solution is a user friendly software application that would be hosted onsite. It has extensive ACL functionality, but also has readily available APIs for extensibility. It supports read-only access, kiosk automation, custom fields, and

  data encryption.

  Which of the following departments' request is in contrast to the favored solution?

  A. Manufacturing
  B. Legal
  C. Sales
  D. Quality assurance
  E. Human resources
  E. Human resources

• Question 73:

  A user on a virtual machine downloads a large file using a popular peer-to-peer torrent program. The user is unable to execute the program on their VM. A security administrator scans the VM and detects a virus in the program. The administrator reviews the hypervisor logs and correlates several access attempts to the time of execution of the virus. Which of the following is the MOST likely explanation for this behavior?

  A. The hypervisor host does not have hardware acceleration enabled and does not allow DEP.
  B. The virus scanner on the VM changes file extensions of all programs downloaded via P2P to prevent execution.
  C. The virtual machine is configured to require administrator rights to execute all programs.
  D. The virus is trying to access a virtual device which the hypervisor is configured to restrict.
  D. The virus is trying to access a virtual device which the hypervisor is configured to restrict.

• Question 74:

  The Chief Information Officer (CIO) is reviewing the IT centric BIA and RA documentation. The documentation shows that a single 24 hours downtime in a critical business function will cost the business $2.3 million. Additionally, the business unit which depends on the critical business function has determined that there is a high probability that a threat will materialize based on historical data. The CIO's budget does not allow for full system hardware replacement in case of a catastrophic failure, nor does it allow for the purchase of additional compensating controls. Which of the following should the CIO recommend to the finance director to minimize financial loss?

  A. The company should mitigate the risk.
  B. The company should transfer the risk.
  C. The company should avoid the risk.
  D. The company should accept the risk.
  B. The company should transfer the risk.

• Question 75:

  A company has asked their network engineer to list the major advantages for implementing a virtual environment in regards to cost. Which of the following would MOST likely be selected?

  A. Ease of patch testing
  B. Reducing physical footprint
  C. Reduced network traffic
  D. Isolation of applications
  B. Reducing physical footprint

• Question 76:

  A systems security consultant is hired by Corporation X to analyze the current enterprise network environment and make recommendations for increasing network security. It is the consultant's first day on the job. Which of the following network design considerations should the consultant consider? (Select THREE).

  A. What hardware and software would work best for securing the network?
  B. What corporate assets need to be protected?
  C. What are the business needs of the organization?
  D. What outside threats are most likely to compromise network security?
  E. What is the budget for this project?
  F. What time and resources are needed to carry out the security plan?
  B. What corporate assets need to be protected?
  C. What are the business needs of the organization?
  D. What outside threats are most likely to compromise network security?

• Question 77:

  A security researcher is about to evaluate a new secure VoIP routing appliance. The appliance manufacturer claims the new device is hardened against all known attacks and several un-disclosed zero day exploits. The code base used for the device is a combination of compiled C and TC/TKL scripts. Which of the following methods should the security research use to enumerate the ports and protocols in use by the appliance?

  A. Device fingerprinting
  B. Switchport analyzer
  C. Grey box testing
  D. Penetration testing
  A. Device fingerprinting

• Question 78:

  A system administrator has just installed a new Linux distribution. The distribution is configured to be "secure out of the box". The system administrator cannot make updates to certain system files and services. Each time changes are attempted, they are denied and a system error is generated. Which of the following troubleshooting steps should the security administrator suggest?

  A. Review settings in the SELinux configuration files
  B. Reset root permissions on systemd files
  C. Perform all administrative actions while logged in as root
  D. Disable any firewall software before making changes
  A. Review settings in the SELinux configuration files

• Question 79:

  A network engineer wants to deploy user-based authentication across the company's wired and wireless infrastructure at layer 2 of the OSI model. Company policies require that users be centrally managed and authenticated and that each user's network access be controlled based on the user's role within the company. Additionally, the central authentication system must support hierarchical trust and the ability to natively authenticate mobile devices and workstations. Which of the following are needed to implement these requirements? (Select TWO).

  A. SAML
  B. WAYF
  C. LDAP
  D. RADIUS
  E. Shibboleth
  F. PKI
  C. LDAP
  D. RADIUS

• Question 80:

  The organization has an IT driver on cloud computing to improve delivery times for IT solution provisioning. Separate to this initiative, a business case has been approved for replacing the existing banking platform for credit card processing with a newer offering. It is the security practitioner's responsibility to evaluate whether the new credit card processing platform can be hosted within a cloud environment. Which of the following BEST balances the security risk and IT drivers for cloud computing?

  A. A third-party cloud computing platform makes sense for new IT solutions. This should be endorsed going forward so as to align with the IT strategy. However, the security practitioner will need to ensure that the third-party cloud provider does regular penetration tests to ensure that all data is secure.
  B. Using a third-party cloud computing environment should be endorsed going forward. This aligns with the organization's strategic direction. It also helps to shift any risk and regulatory compliance concerns away from the company's internal IT department. The next step will be to evaluate each of the cloud computing vendors, so that a vendor can then be selected for hosting the new credit card processing platform.
  C. There may be regulatory restrictions with credit cards being processed out of country or processed by shared hosting providers. A private cloud within the company should be considered. An options paper should be created which outlines the risks, advantages, disadvantages of relevant choices and it should recommended a way forward.
  D. Cloud computing should rarely be considered an option for any processes that need to be significantly secured. The security practitioner needs to convince the stakeholders that the new platform can only be delivered internally on physical infrastructure.
  C. There may be regulatory restrictions with credit cards being processed out of country or processed by shared hosting providers. A private cloud within the company should be considered. An options paper should be created which outlines the risks, advantages, disadvantages of relevant choices and it should recommended a way forward.