Question 341 · 393 in bank
Which of the following mechanisms must a security protocol provide in order for zero-knowledge proofs to work in practical cryptographic applications?
Show answer
Answer: A
CAS-005ExpertCompTIAAll questions freePage 35 of 40
CAS-005 practice questions 341–350
CompTIA SecurityX393 questions across 40 pages are complete and free, with no account or card.
Official study references
393 questions in this bank
Free access · progress saved on this device
Question 342 · 393 in bank
A systems administrator works for an organization that is merging with another one. The systems administrator needs to produce specific reports for the board of directors. Which of the following actions is the board of directors most likely taking?
Show answer
Answer: A
Question 343 · 393 in bank
An engineer sees the following segment while manually integrating legacy code into a modern application:
Which of the following functions or expressions should the engineer modify?
Show answer
Answer: E
Question 344 · 393 in bank
The security team at a hospital has proposed redesigning the lobby to change the orientation of employee monitors in order to prevent patients from seeing anything displayed onscreen. Which of the following concerns is team most likely trying to address?
Show answer
Answer: C
Question 345 · 393 in bank
A Chief Information Security Officer receives the following findings from a third-party risk assessment report: Finding #1: Absence of a risk management process Finding #2: Absence of a formal information security management system Finding #3: Absence of formal procedures to review access Finding #4: Absence of management engagement on monitoring security objectives Which of the following is best for the security team to use when remediating the findings?
Show answer
Answer: B
Question 346 · 393 in bank
An organization has a hybrid architecture that requires disparate systems to communicate with one another without a common chain of trust. Which of the following is the best solution?
Show answer
Answer: D
Question 347 · 393 in bank
A compliance manager is planning an engagement to identify risks in the environment. The manager wants to discuss with business unit leaders essential aspects of the engagement that include identifying critical assets and processes as well as potential points of failure. Which of the following would be most relevant to consider during these conversations?
Show answer
Answer: D
Question 348 · 393 in bank
A security architect wants to configure a mail server so it maintains an updated list of IOCs and blocks known-malicious incoming emails. Which of the following will the security architect most likely need for this task?
Show answer
Answer: B
Question 349 · 393 in bank
A SOC analyst is investigating an event in which a penetration tester was able to successfully create and execute a payload. The analyst pulls the following command history from the affected server: $ uname -a && env $ vim foo.c $ gcc foo.c /tmp/lockfile $ chmod +x /tmp/lockfile $ ./tmp/lockfile Which of the following should the analyst implement to improve the security of the server?
Show answer
Answer: B
Question 350 · 393 in bank
During a vulnerability assessment, a scan reveals the following finding: Windows Server 2016 Missing hotfix KB87728 - CVSS 3.1 Score: 8.1 [High] - Affected host 172.16.15.2 Later in the review process, the remediation team marks the finding as a false positive. Which of the following is the best way to avoid this issue on future scans?
Show answer
Answer: B
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
CAS-005 practice, question 341. 393 questions available.
About this question bank
Version 1.0.0. How we source questions