CompTIA SecurityX393 questions across 40 pages are complete and free, with no account or card.
393 questions in this bank
Free access · progress saved on this device
A developer receives feedback about code quality and efficiency. The developer needs to identify and resolve the following coding issues before submitting the code changes for peer review: • Indexing beyond arrays • Dereferencing null pointers • Potentially dangerous data type combos • Unreachable code • Non-portable constructs Which of the following would be most appropriate for the developer to use in this situation?
Answer: A
A company wants to improve and automate the compliance of its cloud environments to meet industry standards. Which of the following resources should the company use to best achieve this goal?
Answer: C
A company wants to protect against the most common attacks and rapidly integrate with different programming languages. Which of the following technologies is most likely to meet this need?
Answer: A
An organization is concerned about insider threats from employees who have individual access to encrypted material. Which of the following techniques best addresses this issue?
Answer: E
A manufacturing plant is updating its IT services. During discussions, the senior management team created the following list of considerations: • Staff turnover is high and seasonal. • Extreme conditions often damage endpoints. • Losses from downtime must be minimized. • Regulatory data retention requirements exist. Which of the following best addresses the considerations?
Answer: B
A software vendor provides routine functionality and security updates to its global customer base. The vendor would like to ensure distributed updates are authorized, originate from only the company, and have not been modified by others. Which of the following solutions best supports these objectives?
Answer: D
A security analyst detects a possible RAT infection on a computer in the internal network. After reviewing the details of the alert, the analyst identifies the initial vector of the attack was an email that was forwarded to multiple recipients in the same organizational unit. Which of the following should the analyst do first to minimize this type of threat in the future?
Answer: D
A cloud engineer needs to identify appropriate solutions to: • Provide secure access to internal and external cloud resources. • Eliminate split-tunnel traffic flows. • Enable identity and access management capabilities. Which of the following solutions is the most appropriate?
Answer: D
A security engineer is building a solution to disable weak CBC configurations for remote access connections to Linux systems. Which of the following should the security engineer modify?
Answer: D
A security engineer is reviewing the results of an annual penetration test. The report lists one of the results as "critical severity" on several domain-joined workstations: SSL/TLS Weak Protocols Supported TLS 1.0, TLS 1.1 Which of the following should the security engineer implement to remediate this finding in the most centralized manner?
Answer: B
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
CAS-005 practice, question 111. 393 questions available.
Version 1.0.0. How we source questions