CompTIA SecurityX393 questions across 40 pages are complete and free, with no account or card.
393 questions in this bank
Free access · progress saved on this device
An organization has noticed an increase in phishing campaigns utilizing typosquatting. A security analyst needs to enrich the data for commonly used domains against the domains used in phishing campaigns. The analyst uses a log forwarder to forward network logs to the SIEM. Which of the following would allow the security analyst to perform this analysis?
Answer: B
After several companies in the financial industry were affected by a similar incident, they shared information about threat intelligence and the malware used for exploitation. Which of the following should the companies do to best indicate whether the attacks are being conducted by the same actor?
Answer: B
Which of the following most likely explains the reason a security engineer replaced ECC with a lattice-based cryptographic technique?
Answer: D
An administrator reviews the following log and determines the root cause of a site-to-site tunnel failure:
Which of the following actions should the administrator take to most effectively correct the failure?
Answer: C
A security architect is mitigating a vulnerability that previously led to a web application data breach. An analysis into the root cause of the issue finds the following: • An administrator’s account was hijacked and used on several Autonomous System Numbers within 30 minutes. • All administrators use named accounts that require multifactor authentication. • Single sign-on is used for all company applications. Which of the following should the security architect do to mitigate the issue?
Answer: B
An organization currently has IDS, firewall, and DLP systems in place. The systems administrator needs to integrate the tools in the environment to reduce response time. Which of the following should the administrator use?
Answer: A
A company migrating to a remote work model requires that company-owned devices connect to a VPN before logging in to the device itself. The VPN gateway requires that a specific key extension is deployed to the machine certificates in the internal PKI. Which of the following best explains this requirement?
Answer: B
A company that uses several cloud applications wants to property identify: • All the devices potentially affected by a given vulnerability • All the internal servers utilizing the same physical switch • The number of endpoints using a particular operating system Which of the following is the best way to meet the requirements?
Answer: D
Which of the following best describes the challenges associated with widespread adoption of homomorphic encryption techniques?
Answer: D
Company A acquired Company B. Both companies serve a user base in different geographic regions but now collectively serve a globally distributed user base. A security architect needs to design resilient monitoring systems with the following requirements: • User data must remain on the systems of each respective company. • Low latency is needed for all users regardless of company location and user location. • Each company must have its own redundancy. Which of the following practices are the most beneficial in meeting the requirements? (Choose two).
Answer: BC
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
CAS-005 practice, question 201. 393 questions available.
Version 1.0.0. How we source questions