CAS-005 practice questions 291–300

1. Question 291 · 393 in bank

   A company is planning to migrate all of its on-site-hosted applications to a public cloud provider. Which of the following is the best way to reduce the scope of security-relevant work that the company must address after the applications have been migrated to the cloud?

   • AAdopting cloud-native security solutions
   • BUsing a microservices architecture
   • CPerforming a lift-and-shift cloud migration
   • DImplementing serverless cloud services

   Show answer

   Answer: D

   Next question

2. Question 292 · 393 in bank

   A security analyst collects the logs from the web server that is associated with a security incident. The analyst finds the following entry in the logs: SELECT user FROM Customers WHERE userID = "SRequest(userID)" Which of the following will prevent this incident from reoccurring?

   • AURL encoding
   • BQuery parameterization
   • CData sanitization
   • DSQL output encoding

   Show answer

   Answer: B

   Next question

3. Question 293 · 393 in bank

   A security analyst discovers a compromised internal server and finds that the attack vector was an application. When extracting a memory dump with the application process content, the analyst observes the following:

   

   Which of the following solutions should the analyst recommend to best address this issue and avoid reoccurrence?

   • AImplement address space layout randomization and canary stacks.
   • BReduce the buffer size to allow for less stored data.
   • CImprove character filtering and input validation for user inputs.
   • DAllow only the use of digitally signed and validated libraries.

   Show answer

   Answer: A

   Next question

4. Question 294 · 393 in bank

   A security engineer is assisting a DevOps team that has the following requirements for container images: • Ensure container images are hashed and use version controls. • Ensure container images are up to date and scanned for vulnerabilities. Which of the following should the security engineer do to meet these requirements?

   • AEnable clusters on the container image and configure the mesh with ACLs.
   • BEnable new security and quality checks within a CI/CD pipeline.
   • CEnable audits on the container image and monitor for configuration changes.
   • DEnable pulling of the container image from the vendor repository and deploy directly to operations.

   Show answer

   Answer: B

   Next question

5. Question 295 · 393 in bank

   A building camera is remotely accessed and disabled from the remote console application during off-hours. A security analyst reviews the following logs:

   

   Which of the following actions should the analyst take to best mitigate the threat?

   • AImplement WAF protection for the web application.
   • BUpgrade the firmware on the camera.
   • COnly allow connections from approved IPs.
   • DBlock IP 104.18.16.29 on the firewall.

   Show answer

   Answer: C

   Next question

6. Question 296 · 393 in bank

   A company implements an AI model that handles sensitive and personally identifiable information. Which of the following threats is most likely the company's primary concern?

   • AUnsecured output handling
   • BModel theft
   • CModel poisoning
   • DPrompt injection

   Show answer

   Answer: A

   Next question

7. Question 297 · 393 in bank

   Select 2

   A security architect is establishing requirements to design resilience in an enterprise system that will be extended to the company's other physical locations. The system must: • Be survivable to one environmental catastrophe. • Be recoverable within 24 hours of critical loss of availability. • Be resilient to active exploitation of one site-to-site VPN solution. Which of the following design components best meet these requirements while upholding security? (Choose two.)

   • ALoad-balance connection attempts and data egress at internet gateways.
   • BAllocate fully redundant and geographically distributed standby sites.
   • CEmploy layering of routers from diverse vendors.
   • DLease space to establish cold sites throughout other countries.
   • EDeploy redundant identity provider solutions.
   • FImplement full weekly backups to be stored off-site for each of the company's sites.

   Show answer

   Answer: BE

   Next question

8. Question 298 · 393 in bank

   Select 2

   An engineer is designing a wireless access solution that must comply with the IEEE-specified security requirements for the 802.1X protocol. The engineer wants to streamline access by removing the need to provide a WPA2 PSK and domain credentials each time for access. Which of the following actions best meet this requirement? (Choose two.)

   • AIssuing client authentication certificates to devices
   • BIssuing a separate 32-bit key to wireless supplicants
   • CConfiguring RADIUS with EAP-TLS
   • DUsing a geofence over the facility and enforcing it for access
   • EConfiguring RADIUS with EAP-PEAP
   • FConfiguring RADIUS with EAP-FAST

   Show answer

   Answer: AC

   Next question

9. Question 299 · 393 in bank

   An organization must provide access to its internal system data. The organization requires that this access complies with the following: • Access must be automated. • Data confidentiality must be preserved. • Access must be authenticated. • Data must be preprocessed before it is retrieved. Which of the following actions should the organization take to meet these requirements?

   • AConfigure a reverse proxy to protect the data.
   • BImplement an on-demand VPN connection.
   • CDeploy an API gateway protected with access tokens.
   • DContinually publish all relevant data to a CDN.

   Show answer

   Answer: C

   Next question

10. Question 300 · 393 in bank

    Select 2

    Following a security incident, a company decides to improve its device management. The company establishes the following requirements for the new process: • EOL devices must be properly replaced in a timely manner. • Accurate, detailed information about the devices must be available in a centralized repository. Which of the following should the company do to meet these requirements? (Choose two.)

    • AConfigure agent-based vulnerability scanning tools.
    • BImplement an asset management life cycle.
    • CSwitch to a BYOD policy.
    • DTransition to a virtual desktop infrastructure.
    • EEstablish a quality assurance program.
    • FMaintain a configuration management database.

    Show answer

    Answer: BF

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

CAS-005 practice, question 291. 393 questions available.