CompTIA SecurityX393 questions across 40 pages are complete and free, with no account or card.
393 questions in this bank
Free access · progress saved on this device
An organization is developing an AI-enabled digital worker to help employees complete common tasks, such as template development, editing, research, and scheduling. As part of the AI workload, the organization wants to implement guardrails within the platform. Which of the following should the company do to secure the AI environment?
Answer: A
A security analyst discovered requests associated with IP addresses known for both legitimate and bot-related traffic. Which of the following should the analyst use to determine whether the requests are malicious?
Answer: A
A security analyst received a report that an internal web page is down after a company-wide update to the web browser. Given the following error message: Your connection is not private. Attackers might be trying to steal your information for www. internalwebsite.company.com. NET::ERR_CERT_WEAK_SIGNATURE_ALGORITHM Which of the following is the best way to fix this issue?
Answer: D
A company receives reports about misconfigurations and vulnerabilities in a third-party hardware device that is part of its released products. Which of the following solutions is the best way for the company to identify possible issues at an earlier stage?
Answer: D
While performing threat-hunting functions, an analyst is using the Diamond Model of Intrusion Analysis. The analyst identifies the likely adversary, the infrastructure involved, and the target. Which of the following must the threat hunter document to use the model effectively?
Answer: B
A security engineer wants to enhance the security posture of end-user systems in a zero trust environment. Given the following requirements: • Reduce the ability for potentially compromised endpoints to contact C2 infrastructure. • Track the requests that the malware makes to the IPs. • Avoid the download of additional payloads. Which of the following should the engineer deploy to meet these requirements?
Answer: A
A nation-state actor is exposed for attacking large corporations by establishing persistence in smaller companies that are likely to be acquired by these large corporations. The actor then provisions user accounts in the companies for use post-acquisition. Before an upcoming acquisition, a security officer conducts threat modeling with this attack vector. Which of the following practices is the best way to investigate this threat?
Answer: B
After an incident response exercise, a security administrator reviews the following table:
Which of the following should the administrator do to best support rapid incident response in the future?
Answer: A
An organization is required to: • Respond to internal and external inquiries in a timely manner. • Provide transparency. • Comply with regulatory requirements. The organization has not experienced any reportable breaches but wants to be prepared if a breach occurs in the future. Which of the following is the best way for the organization to prepare?
Answer: C
An incident response team is analyzing malware and observes the following: • Does not execute in a sandbox • No network IoCs • No publicly known hash match • No process injection method detected Which of the following should the team do next to proceed with further analysis?
Answer: B
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
CAS-005 practice, question 141. 393 questions available.
Version 1.0.0. How we source questions