CompTIA CAS-004 Online Practice Questions and Exam Preparation

CompTIA CAS-004 Online Questions & Answers

• Question 491:

  Based on PCI DSS v3.4, One Particular database field can store data, but the data must be unreadable. Which of the following data objects meets this requirement?

  A. PAN
  B. CVV2
  C. Cardholder name
  D. expiration date
  A. PAN

  ---

  Explanation

• Question 492:

  Prior to a risk assessment inspection, the Chief Information Officer tasked the systems administrator with analyzing and reporting any configuration issues on the information systems, and then verifying existing security settings. Which of the following would be BEST to use?

  A. SCAP
  B. CVSS
  C. XCCDF
  D. CMDB
  A. SCAP

  ---

  Explanation

• Question 493:

  A security analyst is investigating a possible buffer overflow attack. The following output was found on a user's workstation:

  graphic.linux_randomization.prg

  Which of the following technologies would mitigate the manipulation of memory segments?

  A. NX bit
  B. ASLR
  C. DEP
  D. HSM
  B. ASLR

  ---

  Explanation

  http://webpages.eng.wayne.edu/~fy8421/19sp-csc5290/labs/lab2-instruction.pdf (3)

• Question 494:

  A security analyst has been tasked with assessing a new API. The analyst needs to be able to test for a variety of different inputs, both malicious and benign, in order to close any vulnerabilities. Which of the following should the analyst use to achieve this goal?

  A. Static analysis
  B. Input validation
  C. Fuzz testing
  D. Post-exploitation
  C. Fuzz testing

  ---

  Explanation

  Fuzz testing, or fuzzing, is a software testing technique that involves providing invalid, unexpected, or random data as input to a computer program. The program is then monitored for exceptions such as crashes, or failing built-in code assertions or for potential memory leaks. This type of testing can help identify security vulnerabilities that could be exploited by malicious inputs.

• Question 495:

  A company runs a well ttended, on-premises fitness club for its employees, about 200 of them each day. Employees want to sync center's login and attendance program with their smartphones. Human resources, which manages the contract for the fitness center, has asked the security architecture to help draft security and privacy requirements.

  Which of the following would BEST address these privacy concerns?

  A. Use biometric authentication.
  B. Utilize geolocation/geofencing.
  C. Block unauthorized domain bridging.
  D. Implement containerization
  A. Use biometric authentication.

  ---

  Explanation

• Question 496:

  An organization is referencing NIST best practices for BCP creation while reviewing current internal organizational processes for mission-essential items. Which of the following phases establishes the identification and prioritization of critical systems and functions?

  A. Review a recent gap analysis.
  B. Perform a cost-benefit analysis.
  C. Conduct a business impact analysis.
  D. Develop an exposure factor matrix.
  C. Conduct a business impact analysis.

  ---

  Explanation

  A business impact analysis (BIA) is a key component of business continuity planning that identifies critical systems and functions and assesses the potential impact of various disaster scenarios. By conducting a BIA, an organization can determine which systems and functions are most critical and prioritize them for recovery in the event of a disruption.

  https://itsm.ucsf.edu/business-impact-analysis-bia-0

• Question 497:

  A pharmaceutical company was recently compromised by ransomware. Given the following EDR output from the process investigation:

  

  On which of the following devices and processes did the ransomware originate?

  A. cpt-ws018, powershell.exe
  B. cpt-ws026, DearCry.exe
  C. cpt-ws002, NO-AV.exe
  D. cpt-ws026, NO-AV.exe
  E. cpt-ws002, DearCry.exe
  C. cpt-ws002, NO-AV.exe

  ---

  Explanation

• Question 498:

  A security administrator is trying to securely provide public access to specific data from a web application. Clients who want to access the application will be required to:

  1.Only allow the POST and GET options.

  2.Transmit all data secured with TLS 1.2 or greater.

  3.Use specific URLs to access each type of data that is requested.

  4.Authenticate with a bearer token.

  Which of the following should the security administrator recommend to meet these requirements?

  A. API gateway
  B. Application load balancer
  C. Web application firewall
  D. Reverse proxy
  A. API gateway

  ---

  Explanation

  An API gateway is the best solution to meet the specified requirements for securely providing public access to specific data. An API gateway allows the administrator to control HTTP methods like POST and GET, ensure secure transmission via TLS 1.2 or greater, and enforce authentication using bearer tokens. It also allows access control by specifying URLs for different types of data. API gateways centralize security and traffic management for APIs, making them ideal for this type of secure access scenario. CASP+ emphasizes the importance of API gateways in managing and securing web application interfaces.

  References: CASP+ CAS-004 Exam Objectives: Domain 3.0 Enterprise Security Architecture (API Security and API Gateways) CompTIA CASP+ Study Guide: Securing Web Application Interfaces with API Gateways

• Question 499:

  The following messages are displayed when a VPN client is attempting to connect to an OpenVPN server:

  OpenSSL: error: 140760FC:SSL routines: SSL23_GET_CLIENT_HELLO: unknown protocol'

  TLS_ERROR: BIO read tls_read_plaintext error'

  TLS_ERROR: TLS object->incoming plaintext read error'

  TLS_ERROR: TLS handshake failed'

  SIGUSR1 [soft, tls_error] received, client_instance restarting'

  Which of the following best explains the cause of these messages?

  A. The client is attempting to establish an unencrypted connection with the server.
  B. The server is unreachable to the client and a connection cannot be established.
  C. The client is using LibreSSL libraries while the server is using OpenSSL libraries.
  D. A TLS version mismatch exists between the client and the server.
  D. A TLS version mismatch exists between the client and the server.

  ---

  Explanation

  The TLS handshake errors indicate a TLS version mismatch between the VPN client and the OpenVPN server. Ensuring that both client and server configurations are aligned with compatible TLS versions and configurations is essential to resolving these errors and establishing a successful VPN connection.

• Question 500:

  A threat analyst notices the following URL while going through the HTTP logs.

  

  Which of the following attack types is the threat analyst seeing?

  A. SQL injection
  B. CSRF
  C. Session hijacking
  D. XSS
  D. XSS

  ---

  Explanation