CAS-005 practice questions 361–370

1. Question 361 · 393 in bank

   A company’s engineers must ensure that it is difficult for competitors to determine how the company’s software works. Which of the following techniques can help achieve this objective?

   • ARemoving dead code
   • BUsing code signing
   • CDiversifying binaries
   • DStripping debug symbols

   Show answer

   Answer: D

   Next question

2. Question 362 · 393 in bank

   The accounts payable analyst receives a voicemail from the Chief Executive Officer (CEO), requesting that an invoice be paid. The voicemail provides wire transfer details that do not match the instructions on file. Which of the following is the most likely attack being employed?

   • AExploitation of a chatbot through prompt injection
   • BAutomated exploit generation capabilities through Al systems
   • CAudio cloning of the CEO through online sampling
   • DReal-time, deepfake voice phishing with interactivity
   • ESocial engineering to gain access to internal systems through malware

   Show answer

   Answer: C

   Next question

3. Question 363 · 393 in bank

   As part of a security audit in the software development life cycle, a product manager must demonstrate and provide evidence of a complete representation of the code and modules used within the production-deployed application prior to the build. Which of the following best provides the required evidence?

   • ASoftware composition analysis
   • BRuntime application inspection
   • CStatic application security testing
   • DInteractive application security testing

   Show answer

   Answer: A

   Next question

4. Question 364 · 393 in bank

   During post-incident analysis of a recent website outage, an incident response team identifies the following commands that were run from a compromised internal machine:

   

   Which of the following should the team do?

   • ASinkhole suspicious DNS traffic
   • BImplement DKIM
   • CRestrict host and dig command executions
   • DPrevent successful zone transfers

   Show answer

   Answer: D

   Next question

5. Question 365 · 393 in bank

   The Chief Information Security Officer (CISO) asks the security team whether their SOC is receiving IoCs from an industry ISAC Which of the following is the most likely reason the CISO is interested in obtaining this information?

   • ATo ensure the SOC is able to detect known attacks against similar organizations
   • BTo ensure the SOC is proactively preventing potential attacks
   • CTo ensure the SOC orchestration playbooks are up to date
   • DTo ensure the SOC is aligned with industry best practices

   Show answer

   Answer: A

   Next question

6. Question 366 · 393 in bank

   A security architect wants to integrate a new data source for its SOC team that meets the following requirements • Incident escalation should include specific data points • Clear remediation actions should be included for the incident response team • Timeliness and accuracy are the most important factors Which of the following is the best way to meet the architect's objective?

   • AKnown-exploit vulnerability database
   • BReview incident escalation playbook
   • CValidation of incident scoring
   • DIndustry threat feeds from the ISAC

   Show answer

   Answer: D

   Next question

7. Question 367 · 393 in bank

   A security engineer receives the following findings from a recent security audit: • Data should be protected based on user permissions and roles • User action tracking should be implemented across the network • Digital identities should be validated across the data access workflow Which of the following is the first action the engineer should take to address the findings?

   • AImplement continuous and context-based authentication and authorization
   • BUse an enhanced user credential provisioning workflow and data monitoring tools
   • CImprove federation services for digital identities and data access
   • DDeploy OpenID Connect for application programming interface authentication

   Show answer

   Answer: A

   Next question

8. Question 368 · 393 in bank

   A security engineer discovers that some workstations are trying to establish communication with an unknown domain. The engineer compiles the following information:

   

   Which of the following best describes this attack?

   • AFast flux
   • BSinkholing
   • COn-path attack
   • DDNS poisoning

   Show answer

   Answer: A

   Next question

9. Question 369 · 393 in bank

   An IT team receives reports from an employee who is experiencing account lockouts. The analyst sees brute-force attempts from countries where the company does not have offices. Which of the following solutions would best address this issue?

   • AUsing conditional access for user accounts
   • BRemoving the maximum number of failed login attempts
   • CImplementing SSO for all applications
   • DEnforcing password rotations every 60 days

   Show answer

   Answer: A

   Next question

10. Question 370 · 393 in bank

    A security officer is receiving alerts from a cloud service provider about a new wave of phishing campaigns. To prepare employees, the cloud service provider advises the company to make announcements and develop basic security competence. Which of the following solutions best aligns with the cloud service provider’s advice?

    • AEnhancing crisis management
    • BDeveloping tabletop exercises
    • CEstablishing a security awareness program
    • DCreating simulated attacks

    Show answer

    Answer: C

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

CAS-005 practice, question 361. 393 questions available.