CAS-005 practice questions 311–320

1. Question 311 · 393 in bank

   A developer makes a small change to a resource allocation module on a popular social media website and causes a memory leak. During a peak utilization period, several web servers crash, causing the website to go offline. Which of the following testing techniques is the most efficient way to prevent this from reoccurring?

   • ALoad
   • BSmoke
   • CRegression
   • DCanary

   Show answer

   Answer: A

   Next question

2. Question 312 · 393 in bank

   A company needs to quickly assess whether software deployed across the company's global corporate network contains specific software libraries. Which of the following best enables the company's SOC to respond quickly when such an assessment is required?

   • AMaintaining SAST/DAST reports on a server with access restricted to SOC staff
   • BContractually requiring all software vendors to attest to third-party risk mitigations
   • CRequiring all suppliers and internal developers to implement a thorough SBoM
   • DImplementing a GRC tool to maintain a list of all software vendors and internal developers

   Show answer

   Answer: C

   Next question

3. Question 313 · 393 in bank

   A malware analyst must examine the following partial file sample recovered from a Linux workstation:

   

   Attempts to run the code in a sandbox produce no results. Which of the following should the malware analyst do next to further analyze the malware and discover useful IoCs?

   • AConvert the hex-encoded sample to binary and attempt to decompile it.
   • BRun the encoded sample through an online vulnerability tool and check for any matches.
   • CPad the beginning and end of the sample with binary executables and attempt to execute it.
   • DUse a disassembler on the unencoded snippet to convert from binary to ASCII text.

   Show answer

   Answer: A

   Next question

4. Question 314 · 393 in bank

   Select 2

   During a recent security event, access from the non-production environment to the production environment enabled unauthorized users to install unapproved software and make unplanned configuration changes. During an investigation, the following findings are identified: • Several new users were added in bulk by the IAM team. • Additional firewall and routers were recently added to the network • Vulnerability assessments have been disabled for all devices for more than 30 days. • The application allow list has not been modified in more than two weeks. • Logs were unavailable for various types of traffic • Endpoints have not been patched in more than ten days. Which of the following actions would most likely need to be taken to ensure proper monitoring is in place within the organization? (Choose two.)

   • ADisable bulk user creations by the IAM team.
   • BExtend log retention for all security and network devices for 180 days for all traffic.
   • CReview the application allow list on a daily basis to make sure it is properly configured.
   • DRoutinely update all endpoints and network devices as soon as new patches/hot fixes are available.
   • EEnsure all network and security devices are sending relevant data to the SIEM
   • FConfigure rules on all firewalls to only allow traffic from the production environment to the non-production environment.

   Show answer

   Answer: BE

   Next question

5. Question 315 · 393 in bank

   A security architect is performing threat-modeling activities related to an acquired overseas software company that will be integrated with existing products and systems. Once its software is integrated, the software company will process customer data for the acquiring company. Given the following:

   

   Which of the following mitigations would reduce the risk of the most significant threats?

   • APrivileged access management system with conditional access capabilities to prevent unauthorized access
   • BRate-limiting capabilities on all authentication systems and leveraging single sign-on through federation
   • CSecure development process with gate checks and appropriate code scanning
   • DZero Trust architecture for all assets from the acquired company using microsegmentation against sensitive applications

   Show answer

   Answer: C

   Next question

6. Question 316 · 393 in bank

   An organization purchased a new manufacturing facility and the security administrator needs to: • Implement security monitoring. • Protect any non-traditional device(s)/network(s). • Ensure no downtime for critical systems. Which of the following strategies best meets these requirements?

   • AConfiguring honeypots in the internal network to capture malicious activity
   • BAnalyzing system behavior and responding to any increase in activity
   • CApplying updates and patches soon after they have been released
   • DObserving the environment and proactively addressing any malicious activity

   Show answer

   Answer: D

   Next question

7. Question 317 · 393 in bank

   Engineers are unable to control pumps at Site A from Site В when the SCADA controller at Site A experiences an outage. A security analyst must provide a secure solution that ensures Site A pumps can be controlled by a SCADA controller at Site В if a similar outage occurs again. Which of the following represents the most cost-effective solution?

   • AProcure direct fiber connectivity between Site A and Site В and limit its use to the critical SCADA controller traffic only.
   • BInstall backup SCADA controllers at each site, isolate them from the ОТ network, and assign these backup controllers as high-availability pairs.
   • CIsolate the ОТ environment by providing an air-gapped network segment. Place the SCADA controller for each site in this network segment to minimize outages.
   • DConfigure VPN concentrators inside the ОТ network segments at Site A and Site В and allow the controllers to act as secondary devices for the other site's pumps across this encrypted tunnel.

   Show answer

   Answer: D

   Next question

8. Question 318 · 393 in bank

   As part of a new software development method, a program manager requires that unit tests be written for all code before being promoted to production. The program manager wants to ensure that requirements can be tested and approved. Any security concerns should also be addressed prior to code deployment. Which of the following is an additional benefit of this new requirement?

   • ADynamic analysis
   • BIntegration testing
   • CSoftware composition analysis
   • DInput fuzzing

   Show answer

   Answer: B

   Next question

9. Question 319 · 393 in bank

   A security engineer must implement controls to limit access between developer endpoints and a cloud provider bucket for data storage. Developers routinely save sensitive files to the bucket as part of their projects. The security engineer must reduce the risk of unintended data exposure. Which of the following is the most appropriate control to implement?

   • ARequire server-side encryption using a KMS in the cloud provider.
   • BImplement context-aware reauthentication to the local system.
   • CDeploy an ACL on the virtual private cloud to avoid public access.
   • DRestrict HTTP POST and PUT traffic to specific URLs at the proxy.

   Show answer

   Answer: C

   Next question

10. Question 320 · 393 in bank

    A systems administrator decides to take a programmatic approach in cataloging system resiliency to both new and existing attack patterns. Which of the following should the systems administrator use?

    • AOWASP
    • BATT&CK
    • CSTRIDE
    • DCAPEC

    Show answer

    Answer: B

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

CAS-005 practice, question 311. 393 questions available.