CompTIA CompTIA Certifications CAS-003 Questions & Answers

• Question 281:

  A company recently implemented a new cloud storage solution and installed the required synchronization client on all company devices. A few months later, a breach of sensitive data was discovered. Root cause analysis shows the data breach happened from a lost personal mobile device.

  Which of the following controls can the organization implement to reduce the risk of similar breaches?

  A. Biometric authentication

  B. Cloud storage encryption

  C. Application containerization

  D. Hardware anti-tamper

  Correct Answer: C

• Question 282:

  During a sprint, developers are responsible for ensuring the expected outcome of a change is thoroughly evaluated for any security impacts. Any impacts must be reported to the team lead. Before changes are made to the source code, which of the following MUST be performed to provide the required information to the team lead?

  A. Risk assessment

  B. Regression testing

  C. User story development

  D. Data abstraction

  E. Business impact assessment

  Correct Answer: E

• Question 283:

  An organization is currently working with a client to migrate data between a legacy ERP system and a cloud-based ERP tool using a global PaaS provider. As part of the engagement, the organization is performing data deduplication and sanitization of client data to ensure compliance with regulatory requirements. Which of the following is the MOST likely reason for the need to sanitize the client data? (Choose two.)

  A. Data aggregation

  B. Data sovereignty

  C. Data isolation

  D. Data volume

  E. Data analytics

  F. Data precision

  Correct Answer: BF

• Question 284:

  A company relies on an ICS to perform equipment monitoring functions that are federally mandated for operation of the facility. Fines for non-compliance could be costly. The ICS has known vulnerabilities and can no longer be patched or

  updated. Cyber-liability insurance cannot be obtained because insurance companies will not insure this equipment.

  Which of the following would be the BEST option to manage this risk to the company's production environment?

  A. Avoid the risk by removing the ICS from production

  B. Transfer the risk associated with the ICS vulnerabilities

  C. Mitigate the risk by restricting access to the ICS

  D. Accept the risk and upgrade the ICS when possible

  Correct Answer: C

• Question 285:

  An external red team member conducts a penetration test, attempting to gain physical access to a large organization's server room in a branch office. During reconnaissance, the red team member sees a clearly marked door to the server

  room, located next to the lobby, with a tumbler lock.

  Which of the following is BEST for the red team member to bring on site to open the locked door as quickly as possible without causing significant damage?

  A. Screwdriver set

  B. Bump key

  C. RFID duplicator

  D. Rake picking

  Correct Answer: B

• Question 286:

  A company recently implemented a variety of security services to detect various types of traffic that pose a threat to the company. The following services were enabled within the network:

  1.

  Scan of specific subsets for vulnerabilities

  2.

  Categorizing and logging of website traffic

  3.

  Enabling specific ACLs based on application traffic

  4.

  Sending suspicious files to a third-party site for validation A report was sent to the security team that identified multiple incidents of users sharing large amounts of data from an on-premise server to a public site. A small percentage of that data also contained malware and spyware Which of the following services MOST likely identified the behavior and sent the report?

  A. Content filter

  B. User behavioral analytics

  C. Application sandbox

  D. Web application firewall

  E. Endpoint protection

  F. Cloud security broker

  Correct Answer: B

• Question 287:

  A security analyst works for a defense contractor that produces classified research on drones. The contractor faces nearly constant attacks from sophisticated nation-state actors and other APIs. Which of the following would help protect the confidentiality of the research data?

  A. Use diverse components in layers throughout the architecture

  B. Implement non-heterogeneous components at the network perimeter

  C. Purge all data remnants from client devices' volatile memory at regularly scheduled intervals

  D. Use only in-house developed applications that adhere to strict SDLC security requirements

  Correct Answer: A

• Question 288:

  A security administrator is updating corporate policies to respond to an incident involving collusion between two systems administrators that went undetected for more than six months. Which of the following policies would have MOST likely uncovered the collusion sooner? (Choose two.)

  A. Mandatory vacation

  B. Separation of duties

  C. Continuous monitoring

  D. Incident response

  E. Time-of-day restrictions

  F. Job rotation

  Correct Answer: BF

• Question 289:

  A security architect is reviewing the code for a company's financial website. The architect suggests adding the following HTML element, along with a server-side function, to generate a random number on the page used to initiate a funds

  transfer:

  Which of the following attacks is the security architect attempting to prevent?

  A. SQL injection

  B. XSRF

  C. XSS

  D. Clickjacking

  Correct Answer: B

• Question 290:

  A core router was manipulated by a credentialed bypass to send all network traffic through a secondary router under the control of an unauthorized user connected to the network by WiFi. Which of the following would BEST reduce the risk of this attack type occurring?

  A. Implement a strong, complex password policy for user accounts that have access to the core router.

  B. Deploy 802.1X as the NAC system for the WiFi infrastructure.

  C. Add additional port security settings for the switching environment connected to the core router.

  D. Allow access to the core router management interface only through an out-of-band channel.

  Correct Answer: A