CompTIA CAS-004 Online Practice Questions and Exam Preparation

CompTIA CAS-004 Online Questions & Answers

• Question 771:

  A company just released a new video card. Due to limited supply and high demand, attackers are employing automated systems to purchase the device through the company's web store so they can resell it on the secondary market. The company's intended customers are frustrated. A security engineer suggests implementing a CAPTCHA system on the web store to help reduce the number of video cards purchased through automated systems.

  Which of the following now describes the level of risk?

  A. Inherent
  B. Low
  C. Mitigated
  D. Residual.
  E. Transferred
  D. Residual.

  ---

  Explanation

  Residual risk is the remaining risk after controls or mitigations (such as CAPTCHA) have been applied. In this case, the company has implemented CAPTCHA to reduce automated purchases, but some risk still remains (e.g., bots that can bypass CAPTCHA or human-assisted automation), so the risk is not completely eliminated.

• Question 772:

  A junior security researcher has identified a buffer overflow vulnerability leading to remote code execution in a former employer's software. The security researcher asks for the manager's advice on the vulnerability submission process. Which of the following is the best advice the current manager can provide the security researcher?

  A. Collect proof that the exploit works in order to expedite the process.
  B. Publish proof-of-concept exploit code on a personal blog.
  C. Recommend legal consultation about the process.
  D. Visit a bug bounty website for the latest information.
  C. Recommend legal consultation about the process.

  ---

  Explanation

  Legal consultation is crucial before proceeding with any vulnerability disclosure process, especially when dealing with vulnerabilities found in former employers' software. It ensures that the researcher adheres to legal and ethical standards, protects their rights, and avoids potential legal risks associated with disclosure. Therefore, advising the security researcher to seek legal consultation is the most prudent course of action in this situation.

• Question 773:

  An IT department is currently working to implement an enterprise DLP solution. Due diligence and best practices must be followed in regard to mitigating risk. Which of the following ensures that authorized modifications are well planned and executed?

  A. Risk management
  B. Network management
  C. Configuration management
  D. Change management
  D. Change management

  ---

  Explanation

  Change management is a systematic approach to dealing with the transition or transformation of an organization's goals, processes, or technologies. In the context of implementing a Data Loss Prevention (DLP) solution and ensuring that authorized modifications are well-planned and executed, change management is critical. It ensures that changes are introduced in a controlled and coordinated manner to minimize the impact on service quality and mitigate risks associated with the changes.

• Question 774:

  A technology company developed an in-house chat application that is used only by developers. An open-source library within the application has been deprecated. The facts below are provided:

  1.The cost of replacing this system is nominal.

  2.The system provides no revenue to the business.

  3.The system is not a critical part of the business. Which of the following is the best risk mitigation strategy?

  A. Transfer the risk, since developers prefer using this chat application over alternatives.
  B. Accept the risk, since any system disruption will only impact developers.
  C. Avoid the risk by shutting down this application and migrating to another chat platform.
  D. Mitigate the risk by purchasing an EDR and configuring network ACLs.
  C. Avoid the risk by shutting down this application and migrating to another chat platform.

  ---

  Explanation

  Shutting down and migrating to another platform is the most cost-effective and practical option. This avoids risks associated with the deprecated library. This aligns with CASP+ objective 1.3, which emphasizes practical risk mitigation strategies.

• Question 775:

  A security engineer is creating a single CSR for the following web server hostnames:

  1.wwwint.internal

  2.www.company.com

  3.home.internal

  4.www.internal

  Which of the following would meet the requirement?

  A. SAN
  B. CN
  C. CA
  D. CRL
  E. Issuer
  A. SAN

  ---

  Explanation

  Subject Alternative Name (SAN) is a part of the X.509 specification for SSL certificates that allows multiple domain names to be protected under a single SSL certificate. Using SAN is the most suitable option when a single Certificate Signing Request (CSR) needs to cover multiple hostnames. It enables the security engineer to list all the required hostnames in one certificate, ensuring secure communications for each listed entity without the need for separate certificates.

• Question 776:

  A security administrator has been tasked with hardening a domain controller against lateral movement attacks. Below is an output of running services:

  

  Which of the following configuration changes must be made to complete this task?

  A. Stop the Print Spooler service and set the startup type to disabled.
  B. Stop the DNS Server service and set the startup type to disabled.
  C. Stop the Active Directory Web Services service and set the startup type to disabled.
  D. Stop Credential Manager service and leave the startup type to disabled.
  A. Stop the Print Spooler service and set the startup type to disabled.

  ---

  Explanation

• Question 777:

  An organization requires a legacy system to incorporate reference data into a new system. The organization anticipates the legacy system will remain in operation for the next 18 to 24 months. Additionally, the legacy system has multiple critical vulnerabilities with no patches available to resolve them. Which of the following is the BEST design option to optimize security?

  A. Limit access to the system using a jump box.
  B. Place the new system and legacy system on separate VLANs
  C. Deploy the legacy application on an air-gapped system.
  D. Implement MFA to access the legacy system.
  B. Place the new system and legacy system on separate VLANs

  ---

  Explanation

• Question 778:

  A company just released a new video card. Due to limited supply and nigh demand, attackers are employing automated systems to purchase the device through the company's web store so they can resell it on the secondary market. The company's Intended customers are frustrated. A security engineer suggests implementing a CAPTCHA system on the web store to help reduce the number of video cards purchased through automated systems. Which of the following now describes the level of risk?

  A. Inherent Low
  B. Mitigated
  C. Residual
  D. Transferred
  C. Residual

  ---

  Explanation

  Residual risk is the risk that remains after implementing controls. In this scenario, CAPTCHA is introduced to mitigate automated purchases, but some risk still exists (e.g., CAPTCHA bypass techniques, human solvers). Therefore, the appropriate term for the remaining risk is Residual

• Question 779:

  An organization had been leveraging RC4 to protect the confidentiality of a continuous, high-throughput 4K video stream but must upgrade to a more modern cipher. The new cipher must maximize speed, particularly on endpoints without crypto instruction sets or coprocessors. Which of the following is MOST likely to meet the organization's requirements?

  A. ChaCha20
  B. ECDSA
  C. Blowfish
  D. AES-GCM
  E. AES-CBC
  A. ChaCha20

  ---

  Explanation

  ChaCha20 is a stream cipher that is designed to be fast and efficient on a variety of hardware platforms, including those without crypto instruction sets or coprocessors. It is also a relatively new cipher, which means that it is less likely to have known vulnerabilities.

• Question 780:

  A company's BIA indicates that any loss of more than one hour of data would be catastrophic to the business. Which of the following must be in place to meet this requirement?

  A. RPO
  B. RTO
  C. SLA
  D. DRP
  E. BCP
  A. RPO

  ---

  Explanation

  RPO (Recovery Point Objective): Specifies the maximum acceptable amount of data loss measured in time. If data loss of more than one hour is unacceptable, the RPO should be set to less than or equal to one hour. RTO (Recovery Time

  Objective): Refers to the acceptable duration of system downtime, which is not relevant to the question.

  The BCP, DRP, and SLA do not directly address data loss.

  CASP+ Exam Objectives 1.3 ?Analyze BIA results to determine RPO and RTO requirements.