CAS-005 practice questions 151–160

1. Question 151 · 393 in bank

   Which of the following best explains the business requirement a healthcare provider fulfills by encrypting patient data at rest?

   • ASecuring data transfer between hospitals
   • BProviding for non-repudiation of data
   • CReducing liability from identity theft
   • DProtecting privacy while supporting portability

   Show answer

   Answer: C

   Next question

2. Question 152 · 393 in bank

   A security engineer is implementing security measures on new hardware in preparation for its launch. During the development phase, a risk related to protections at the UEFI level was found. Which of the following should the engineer recommend to reduce this risk?

   • AConfiguring paravirtualization protection
   • BEnabling Secure Boot
   • CInstalling cryptography at the operational system level
   • DImplementing hardware root of trust

   Show answer

   Answer: B

   Next question

3. Question 153 · 393 in bank

   A hotel chain wants to use point-of-sale systems to allow customers to check in and out of their rooms without employee assistance. These systems should limit access to a specific set of programs approved to run, with all other programs blocked. Which of the following should the company configure to best support this goal?

   • AApplication control using a fresh image, with the applications fully configured as a baseline to build and block other applications from execution
   • BA host-based intrusion detection system to monitor and block all suspicious activities if they occur on the systems
   • CAnti-malware on these systems and only approved application file locations can be bypassed
   • DEvent logs to be collected from the systems for all security events and some custom application logs

   Show answer

   Answer: A

   Next question

4. Question 154 · 393 in bank

   A user reports application access issues to the help desk. The help desk reviews the logs for the user:

   

   Which of the following is most likely the reason for the issue?

   • AThe user inadvertently tripped the geoblock rule in NGFW.
   • BA threat actor has compromised the user's account and attempted to log in.
   • CThe user is not allowed to access the human resources system outside of business hours.
   • DThe user did not attempt to connect from an approved subnet.

   Show answer

   Answer: D

   Next question

5. Question 155 · 393 in bank

   A global organization wants to manage all endpoint and user telemetry. The organization also needs to differentiate this data based on which office it is correlated to. Which of the following strategies best aligns with this goal?

   • ASensor placement
   • BData labeling
   • CContinuous monitoring
   • DCentralized logging

   Show answer

   Answer: B

   Next question

6. Question 156 · 393 in bank

   A security architect must make sure that the least number of services as possible is exposed in order to limit an adversary's ability to access the systems. Which of the following should the architect do first?

   • AEnforce Secure Boot.
   • BPerform attack surface reduction.
   • CDisable third-party integrations.
   • DLimit access to the systems.

   Show answer

   Answer: B

   Next question

7. Question 157 · 393 in bank

   A security officer performs due diligence activities before implementing a third-party solution into the enterprise environment. The security officer needs evidence from the third party that a data subject access request handling process is in place. Which of the following is the security officer most likely seeking to maintain compliance?

   • AInformation security standards
   • BE-discovery requirements
   • CPrivacy regulations
   • DCertification requirements
   • EReporting frameworks

   Show answer

   Answer: C

   Next question

8. Question 158 · 393 in bank

   An administrator needs to craft a single certificate-signing request for a web-server certificate. The server should be able to use the following identities to mutually authenticate other resources over TLS: • www.int.comptia.org • webserver01 .int.comptia.org • 10.5.100.10 Which of the following certificate fields must be set properly to support this objective?

   • ASubject alternative name
   • BOrganizational unit
   • CExtended key usage
   • DCertificate extension

   Show answer

   Answer: A

   Next question

9. Question 159 · 393 in bank

   A security analyst reviews the following event timeline from an EDR solution:

   

   Which of the following has most likely occurred and needs to be fixed?

   • AThe DLP has failed to block malicious exfiltration, and data tagging is not being utilized properly.
   • BA NIDS bypass was utilized by a threat actor, and updates must be installed by the administrator.
   • CA logic flaw has introduced a TOCTOU vulnerability and must be addressed by the vendor.
   • DA potential insider threat is being investigated and will be addressed by the senior management team.

   Show answer

   Answer: C

   Next question

10. Question 160 · 393 in bank

    A hospital provides tablets to its medical staff to enable them to more quickly access and edit patients' charts. The hospital wants to ensure that if a tablet is identified as lost or stolen and a remote command is issued, the risk of data loss can be mitigated within seconds. The tablets are configured as follows to meet hospital policy: • Full disk encryption is enabled. • "Always On" corporate VPN is enabled. • eFuse-backed keystore is enabled/ready. • Wi-Fi 6 is configured with SAE. • Location services is disabled. • Application allow list is unconfigured. Assuming the hospital policy cannot be changed, which of the following is the best way to meet the hospital's objective?

    • ARevoke the user VPN and Wi-Fi certificates
    • BCryptographically erase FDE volumes
    • CIssue new MFA credentials to all users
    • DConfigure the application allow list

    Show answer

    Answer: B

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

CAS-005 practice, question 151. 393 questions available.