CAS-005 practice questions 171–180

1. Question 171 · 393 in bank

   A security engineer is reviewing the following vulnerability scan report:

   

   Which of the following should the engineer prioritize for remediation?

   • AApache HTTP Server
   • BOpenSSH
   • CGoogle Chrome
   • DMigration to TLS 1.3

   Show answer

   Answer: B

   Next question

2. Question 172 · 393 in bank

   A company notices that cloud environment costs increased after using a new serverless solution based on API requests. Many invalid requests from unknown IPs were found, often within a short time. Which of the following solutions would most likely solve this issue, reduce cost, and improve security?

   • AUsing digital certificates for known customers and performing API authorization through those certificates
   • BDefining request rate limits and comparing new requests from unknown IPs with a list of known-malicious IPs
   • CSetting authentication processes for the API requests as well as proper rate limits according to regular usage
   • DOnly allowing API requests coming from regions with known customers

   Show answer

   Answer: C

   Next question

3. Question 173 · 393 in bank

   A large organization deployed a generative AI platform for its global user population to use. Based on feedback received during beta testing, engineers have identified issues with user interface latency and page-loading performance for international users. The infrastructure is currently maintained within two separate data centers, which are connected using high-availability networking and load balancers. Which of the following is the best way to address the performance issues?

   • AConfiguring the application to use a CDN
   • BImplementing RASP to enable large language models queuing
   • CRemote journaling within a third data center
   • DTraffic shaping through the use of a SASE

   Show answer

   Answer: A

   Next question

4. Question 174 · 393 in bank

   A company reduced its staff 60 days ago, and applications are now starting to fail. The security analyst is investigating to determine if there is malicious intent for the application failures. The security analyst reviews the following logs:

   

   Which of the following is the most likely reason for the application failures?

   • AThe user’s account was set as a service account
   • BThe user's home directory was deleted
   • CThe user does not have sudo access.
   • DThe root password has been changed

   Show answer

   Answer: A

   Next question

5. Question 175 · 393 in bank

   Source code snippets for two separate malware samples are shown below:

   

   Which of the following describes the most important observation about the two samples?

   • ATelemetry is first buffered and then transmitted in paranoid mode
   • BThe samples were probably written by the same developer.
   • CBoth samples use IP connectivity for command and control
   • DSample 1 is the target agent while Sample 2 is the C2 server.

   Show answer

   Answer: B

   Next question

6. Question 176 · 393 in bank

   A security analyst received a notification from a cloud service provider regarding an attack detected on a web server. The cloud service provider shared the following information about the attack: • The attack came from inside the network. • The attacking source IP was from the internal vulnerability scanners • The scanner is not configured to target the cloud servers. Which of the following actions should the security analyst take first?

   • ACreate an allow list for the vulnerability scanner IPs in order to avoid false positives
   • BConfigure the scan policy to avoid targeting an out-of-scope host
   • CSet network behavior analysis rules.
   • DQuarantine the scanner sensor to perform a forensic analysis

   Show answer

   Answer: B

   Next question

7. Question 177 · 393 in bank

   A company implemented a NIDS and a NIPS on the most critical environments. Since this implementation the company has been experiencing network connectivity issues. Which of the following should the security architect recommend for a new NIDS/NIPS implementation?

   • AImplementing the NIDS with a port mirror in the core switch and the NIPS in the main firewall
   • BImplementing the NIDS and the NIPS together with the main firewall
   • CImplementing a NIDS without a NIPS to increase the detection capability
   • DImplementing the NIDS in the bastion host and the NIPS in the branch network router

   Show answer

   Answer: A

   Next question

8. Question 178 · 393 in bank

   Select 2

   The material findings from a recent compliance audit indicate a company has an issue with excessive permissions. The findings show that employees changing roles or departments results in privilege creep. Which of the following solutions are the best ways to mitigate this issue? (Choose two.)

   • ASetting different access controls defined by business area
   • BImplementing a role-based access policy
   • CDesigning a least-needed privilege policy
   • DEstablishing a mandatory vacation policy
   • EPerforming periodic access reviews
   • FRequiring periodic job rotation

   Show answer

   Answer: BE

   Next question

9. Question 179 · 393 in bank

   A security analyst is reviewing a SIEM and generates the following report:

   

   Later, the incident response team notices an attack was executed on the VM001 host. Which of the following should the security analyst do to enhance the alerting process on the SIEM platform?

   • AInclude the EDR solution on the SIEM as a new log source
   • BPerform a log correlation on the SIEM solution
   • CImprove parsing of data on the SIEM
   • DCreate a new rule set to detect malware

   Show answer

   Answer: B

   Next question

10. Question 180 · 393 in bank

    Select 2

    A security administrator is performing a gap assessment against a specific OS benchmark. The benchmark requires the following configurations be applied to endpoints: • Full disk encryption • Host-based firewall • Time synchronization • Password policies • Application allow listing • Zero Trust application access Which of the following solutions best addresses the requirements? (Choose two.)

    • AMDM
    • BCASB
    • CSBoM
    • DSCAP
    • ESASE
    • FHIDS

    Show answer

    Answer: AE

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

CAS-005 practice, question 171. 393 questions available.