CompTIA SecurityX393 questions across 40 pages are complete and free, with no account or card.
393 questions in this bank
Free access · progress saved on this device
A security engineer needs to remediate a SWEET32 vulnerability in an OpenSSH-based application and review existing configurations. Which of the following should the security engineer do? (Choose two.)
Answer: EF
A DevOps engineer sets up a CI/CD pipeline to deploy application container images in the Kubernetes production environment. The security engineer wants to prevent the deployment of unsecured images. Which of the following security solutions should the engineer use in the pipeline to meet this objective?
Answer: C
In order to follow new regulations, the Chief Information Security Officer plans to use a defense-in-depth approach for a perimeter network. Which of the following protections would best achieve this goal?
Answer: B
Protected company data was recently exfiltrated. The SOC did not find any indication of a network or outside physical intrusion, and the DLP systems reported no unusual activity. The incident response team determined a text file was encrypted and reviews the following:
Which of the following is the most appropriate action for the team to take?
Answer: B
A security team is evaluating the following vulnerabilities in response to a third-party risk assessment:
Given the following organizational policy requirements: • Any adjusted CVSS score of 7.0 or greater must be remediated within 15 days. • Any adjusted CVSS score of 6.9 or less must be remediated within 30 days. • Any vulnerability with a known public exploit must be remediated within seven days. • Any vulnerability that requires high privileges can have a lower severity. Which of the following actions should the analyst do to meet the requirements on time?
Answer: A
During an incident response activity, the response team collected some artifacts from a compromised server, but the following information is missing: • Source of the malicious files • Initial attack vector • Lateral movement activities The next step in the playbook is to reconstruct a timeline. Which of the following best supports this effort?
Answer: D
A Chief Information Security Officer is concerned about the operational impact of ransomware. In the event of a ransomware attack, the business requires the integrity of the data to remain intact and an RPO of less than one hour. Which of the following storage strategies best satisfies the business requirements?
Answer: C
A company wants to protect a web-based application against application-layer attacks by monitoring the inputs, outputs, and internal state of the application. The solution must also rapidly integrate with different programming languages. Which of the following technologies is most likely to meet this need?
Answer: A
A security architect performs a baseline review on the SIEM. The findings indicate that multiple use cases are missing and coverage is limited for defense evasion techniques. Which of the following processes best describes what the architect should do?
Answer: D
A vulnerability scan was performed on a website, and the following encryption suites were found:
Which of the following actions will remediate the vulnerability?
Answer: A
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
CAS-005 practice, question 301. 393 questions available.
Version 1.0.0. How we source questions