CAS-004 Online Practice Questions
792 questions available · Page 1 of 80
Updated Exam DumpsVerified AnswersPass Guarantee
A company is looking at sending historical backups containing customer PII to a cloud service provider to save on storage costs.
Which of the following is the MOST important consideration before making this decision?
Correct answer: B
An IT director is working on a solution to meet the challenge of remotely managing laptop devices and securely locking them down. The solution must meet the following requirements:
1. Cut down on patch management.
2. Make use of standard configurations.
3. Allow for custom resource configurations.
4. Provide access to the enterprise system from multiple types of devices.
Which of the following would meet these requirements?
Correct answer: D
Cut down on patch management: With VDI, the virtual desktops are managed centrally. Patches and updates can be applied to the master image, which then gets propagated to all virtual desktops. This significantly reduces the complexity and workload of patch management.
Standard configurations: VDI allows for the deployment of standardized desktop images, ensuring consistency across all user desktops. Allow for custom resource configurations: VDI can be configured to allocate different levels of resources (CPU, memory, storage) based on the needs of different users or groups. Provide access to the enterprise system from multiple types of devices: Users can access their virtual desktops from various devices, including laptops, tablets, and smartphones, as long as they have a network connection.
DRAG DROP
A security consultant is considering authentication options for a financial institution. The following authentication options are available security mechanism to the appropriate use case. Options may be used once.
An organization is designing a MAC scheme (or critical servers running GNU/Linux. The security engineer is investigating SELinux but is confused about how to read labeling contexts. The engineer executes the command stat ./secretfile and receives the following output:
Which of the following describes the correct order of labels shown in the output above?
Correct answer: D
SELinux contexts are typically made up of several components, including the user identity, role, type (also known as domain or type), and MLS (Multi-Level Security) level. The context format is user:role:type:level.
In the given output sys:secret:sec_t:s0, 'sys' represents the user identity, 'secret' is the role, 'sec_t' is the type, and 's0' is the MLS level. Understanding SELinux contexts is critical for managing Mandatory Access Control (MAC) in GNU/Linux systems to protect against unauthorized access.
A corporation with a BYOD policy is very concerned about issues that may arise from data ownership. The corporation is investigating a new MDM solution and has gathered the following requirements as part of the requirements-gathering phase.
1. Each device must be issued a secure token of trust from the corporate PKI.
2. All corporate application and local data must be able to deleted from a central console.
3. Cloud storage and backup applications must be restricted from the device.
4. Devices must be on the latest OS version within three weeks of an OS release.
Which of the following should be feature in the new MDM solution to meet these requirement? (Select
TWO.)
Correct answers: A, C
A company wants to refactor a monolithic application to take advantage of cloud native services and service microsegmentation to secure sensitive application components.
Which of the following should the company implement to ensure the architecture is portable?
Correct answer: D
Containers encapsulate an application and its dependencies into a single unit. This makes it possible to run applications consistently across various computing environments, ensuring portability. Tools like Docker have popularized containerization, allowing developers to package applications and their required environment, and then deploy that container to various systems.
An organization that provides a SaaS solution recently experienced an incident involving customer data loss. The system has a level of self-healing that includes monitoring performance and available resources.
When the system detects an issue, the self-healing process is supposed to restart parts of the software.
During the incident, when the self-healing system attempted to restart the services, available disk space on the data drive to restart all the services was inadequate. The self-healing system did not detect that some services did not fully restart and declared the system as fully operational.
Which of the following BEST describes the reason why the silent failure occurred?
Correct answer: D
A security architect needs to enable a container orchestrator for DevSecOps and SOAR initiatives. The engineer has discovered that several Ansible YAML files used for the automation of configuration management have the following content:
Which of the following should the engineer do to correct the security issues presented within this content?
Correct answer: D
A security analyst discovered that the company's WAF was not properly configured. The main web server was breached, and the following payload was found in one of the malicious requests:
Which of the following would BEST mitigate this vulnerability?
Correct answer: B
References:
https://hdivsecurity.com/owasp-xml-external-entities-xxe
A software house is developing a new application. The application has the following requirements:
1. Reduce the number of credential requests as much as possible
2. Integrate with social networks
3. Authenticate users
Which of the following is the BEST federation method to use for the application?
Correct answer: B