CAS-005 practice questions 321–330

1. Question 321 · 393 in bank

   Which of the following includes best practices for validating perimeter firewall configurations?

   • ACIS controls
   • BMITRE ATT&CK
   • CNIST CSF
   • DISO 27001

   Show answer

   Answer: A

   Next question

2. Question 322 · 393 in bank

   A company SIEM collects information about the log sources. Given the following report information:

   

   Which of the following actions should a security engineer take to enhance the security monitoring posture?

   • ACalibrate the timing on the log sources to enhance event correlation.
   • BImplement a centralized use case library to get alerts based on the type of log sources.
   • CPerform a non-reporting device assessment to collect missing log sources.
   • DCreate a resiliency plan to prevent losing event logs from log sources.

   Show answer

   Answer: A

   Next question

3. Question 323 · 393 in bank

   A security manager at a local hospital wants to secure patient medical records. The manager needs to: • Choose an access control model that clearly defines who has access to sensitive information. • Prevent those who enter new patient information from specifying who has access to this data. Which of the following access control models is the best way to ensure the lowest risk of granting unintentional access?

   • ARule-based
   • BAttribute-based
   • CMandatory
   • DDiscretionary

   Show answer

   Answer: C

   Next question

4. Question 324 · 393 in bank

   An organization recently experienced a security incident due to an exterior door in a busy area getting stuck open. The organization launches a security campaign focused on the motto. "See Something. Say Something." Which of the following best describes what the organization wants to educate employees about?

   • ASituational awareness
   • BPhishing
   • CSocial engineering
   • DTailgating

   Show answer

   Answer: A

   Next question

5. Question 325 · 393 in bank

   After a leak of important documents, a company decides to implement a data protection program to avoid similar incidents in the future. Which of the following should the company do first?

   • AImplement data encryption.
   • BPerform data storage hardening.
   • CDeploy a data loss prevention policy.
   • DDevelop data labeling standards.

   Show answer

   Answer: D

   Next question

6. Question 326 · 393 in bank

   Select 2

   An organization is developing an in-house software platform to support capital planning and reporting functions. In addition to role-based access controls and auditing/logging capabilities, the product manager must include requirements associated with archiving data and immutable backups. Which of the following organizational considerations are most likely associated with this requirement? (Choose two.)

   • ACrypto-export management controls
   • BSupply chain weaknesses
   • CDevice attestation
   • DQuality assurance
   • ELegal hold compliance
   • FRansomware resilience

   Show answer

   Answer: EF

   Next question

7. Question 327 · 393 in bank

   A threat intelligence company's business objective is to allow customers to integrate data directly to different TIPs through an API. The company would like to address as many of the following objectives as possible: • Reduce compute spend as much as possible. • Ensure availability for all users. • Reduce the potential attack surface. • Ensure the integrity of the data provided. Which of the following should the company consider to best meet the objectives?

   • AConfiguring a unique API secret key for accounts
   • BPublishing a list of IOCs on a public directory
   • CImplementing rate limiting for each registered user
   • DProviding a hash of all data that is made available

   Show answer

   Answer: A

   Next question

8. Question 328 · 393 in bank

   A company's Chief Information Security Officer learns that the senior leadership team is traveling to a country accused of attempting to steal intellectual property saved on laptops. Which of the following is the best method to protect against this attack?

   • AConfigure Measured Boot to report any firmware changes.
   • BUse sanitized devices with remote connections to VDI.
   • CDeploy self-encrypting drives to protect company data.
   • DInstall tamper-evident stickers over any laptop screws.

   Show answer

   Answer: B

   Next question

9. Question 329 · 393 in bank

   An organization would like to increase the effectiveness of its incident response process across its multiplatform environment. A security engineer needs to implement the improvements using the organization's existing incident response tools. Which of the following should the security engineer use?

   • APlaybooks
   • BEvent collectors
   • CCentralized logging
   • DEndpoint detection

   Show answer

   Answer: A

   Next question

10. Question 330 · 393 in bank

    A company sells a security appliance assembled from globally sourced hardware and software components. Installing the security appliance requires enabling administrative permissions for the service accounts on the appliance. Which of the following allows the company to reassure new and existing customers that the risk introduced by the appliance is minimal?

    • AThe results of a qualitative risk analysis performed on the appliance
    • BA business impact analysis and risk prioritization process
    • CResults of internal risk reduction studies conducted by a third-party assessor
    • DA transparent supply chain risk management and testing program

    Show answer

    Answer: D

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

CAS-005 practice, question 321. 393 questions available.