CompTIA CAS-003 Online Practice Questions and Exam Preparation

CompTIA CAS-003 Online Questions & Answers

• Question 311:

  Which of the following is a feature of virtualization that can potentially create a single point of failure?

  A. Server consolidation
  B. Load balancing hypervisors
  C. Faster server provisioning
  D. Running multiple OS instances
  A. Server consolidation

• Question 312:

  An organization is concerned that its hosted web servers are not running the most updated version of software. Which of the following would work BEST to help identify potential vulnerabilities?

  A. hping3 -S comptia.org -p 80
  B. nc -1 -v comptia.org -p 80
  C. nmap comptia.org -p 80 -sV
  D. nslookup -port=80 comptia.org
  C. nmap comptia.org -p 80 -sV

• Question 313:

  As part of a systems modernization program, the use of a weak encryption algorithm is identified m a wet se-vices API The client using the API is unable to upgrade the system on its end which would support the use of a secure algorithm set As a temporary workaround the client provides its IP space and the network administrator Limits access to the API via an ACL to only the IP space held by the client. Which of the following is the use of the ACL in this situation an example of?

  A. Avoidance
  B. Transference
  C. Mitigation
  D. Acceptance
  E. Assessment
  C. Mitigation

• Question 314:

  A company recently experienced a period of rapid growth, and it now needs to move to a more scalable cloud-based solution Historically. salespeople have maintained separate systems for information on competing customers to prevent the inadvertent disclosure of one customer's information to another customer Which of the following would be the BEST method to provide secure data separation?

  A. Use a CRM tool to separate data stores
  B. Migrate to a single-tenancy cloud infrastructure
  C. Employ network segmentation to provide isolation among salespeople
  D. Implement an open-source public cloud CRM
  C. Employ network segmentation to provide isolation among salespeople

• Question 315:

  A security auditor needs to review the manner in which an entertainment streaming device operates The auditor is analyzing the output of a port scanning tool to determine the next steps in the security review. Given the following log output:

  

  The best option for the auditor to use NEXT is:

  A. a SCAP assessment
  B. reverse engineering
  C. fuzzing
  D. network interception
  B. reverse engineering

• Question 316:

  An administrator wants to ensure hard drives cannot be removed from hosts and men installed into and read by unauthorized hosts Which of the following techniques would BEST support this?

  A. Access control lists
  B. TACACS+ server for AAA
  C. File-level encryption
  D. TPM with sealed storage
  A. Access control lists

• Question 317:

  An organization relies heavily on third-party mobile applications for official use within a BYOD deployment scheme. An excerpt from an approved text-based-chat client application AndroidManifest.xml is as follows:

  

  Which of the following would restrict application permissions while minimizing the impact to normal device operations?

  A. Add the application to the enterprise mobile whitelist.
  B. Use the MDM to disable the devices' recording microphones and SMS
  C. Wrap the application before deployment
  D. Install the application outside of the corporate container
  A. Add the application to the enterprise mobile whitelist.

• Question 318:

  A new database application was added to a company's hosted VM environment. Firewall ACLs were modified to allow database users to access the server remotely. The company's cloud security broker then identified abnormal from a database user on-site. Upon further investigation, the security team noticed the user ran code on a VM that provided access to the hypervisor directly and access to other sensitive data.

  Which of the following should the security do to help mitigate future attacks within the VM environment? (Choose two.)

  A. Install the appropriate patches.
  B. Install perimeter NGFW.
  C. Configure VM isolation.
  D. Deprovision database VM.
  E. Change the user's access privileges.
  F. Update virus definitions on all endpoints.
  C. Configure VM isolation.
  E. Change the user's access privileges.

• Question 319:

  An attacker attempts to create a DoS event against the VoIP system of a company. The attacker uses a tool to flood the network with a large number of SIP INVITE traffic. Which of the following would be LEAST likely to thwart such an attack?

  A. Install IDS/IPS systems on the network
  B. Force all SIP communication to be encrypted
  C. Create separate VLANs for voice and data traffic
  D. Implement QoS parameters on the switches
  D. Implement QoS parameters on the switches

  ---

  Quality of service (QoS) is a mechanism that is designed to give priority to different applications, users, or data to provide a specific level of performance. It is often used in networks to prioritize certain types of network traffic. It is not designed to block traffic, per se, but to give certain types of traffic a lower or higher priority than others. This is least likely to counter a denial of service (DoS) attack.

• Question 320:

  A company monitors the performance of all web servers using WMI. A network administrator informs the security engineer that web servers hosting the company's client-facing portal are running slowly today. After some investigation, the security engineer notices a large number of attempts at enumerating host information via SNMP from multiple IP addresses.

  Which of the following would be the BEST technique for the security engineer to employ in an attempt to prevent reconnaissance activity?

  A. Install a HIPS on the web servers
  B. Disable inbound traffic from offending sources
  C. Disable SNMP on the web servers
  D. Install anti-DDoS protection in the DMZ
  A. Install a HIPS on the web servers