CAS-005 practice questions 41–50

1. Question 41 · 393 in bank

   A web application server is running a legacy operating system with an unpatched RCE vulnerability. The server cannot be upgraded until the corresponding application code is changed. Which of the following compensating controls would best prevent successful exploitation?

   • ASegmentation
   • BCASB
   • CHIPS
   • DUEBA

   Show answer

   Answer: A

   Next question

2. Question 42 · 393 in bank

   Which of the following is the reason why security engineers often cannot upgrade the security of embedded facility automation systems?

   • AThey are constrained by available compute.
   • BThey lack x86-64 processors.
   • CThey lack EEPROM.
   • DThey are not logic-bearing devices.

   Show answer

   Answer: A

   Next question

3. Question 43 · 393 in bank

   A security analyst identified a vulnerable and deprecated runtime engine that Is supporting a public-facing banking application. The developers anticipate the transition to modern development environments will take at least a month. Which of the following controls would best mitigate the risk without interrupting the service during the transition?

   • AShutting down the systems until the code is ready
   • BUninstalling the impacted runtime engine
   • CSelectively blocking traffic on the affected port
   • DConfiguring IPS and WAF with signatures

   Show answer

   Answer: D

   Next question

4. Question 44 · 393 in bank

   A security architect wants to ensure a remote host's identity and decides that pinning the X.509 certificate to the device is the most effective solution. Which of the following must happen first?

   • AUse Distinguished Encoding Rules (DER) for the certificate.
   • BExtract the private key from the certificate.
   • CUse an out-of-band method to obtain the certificate.
   • DCompare the retrieved certificate with the embedded certificate.

   Show answer

   Answer: C

   Next question

5. Question 45 · 393 in bank

   A company hired a third-party consultant to run a cybersecurity incident simulation in order to identify security gaps and prepare stakeholders for a potential incident. Which of the following best describes this activity?

   • ATabletop exercise
   • BWalk-through review
   • CLessons learned
   • DBusiness impact analysis

   Show answer

   Answer: A

   Next question

6. Question 46 · 393 in bank

   A security officer is requiring all personnel working on a special project to obtain a security clearance requisite with the level of all information being accessed. Data on this network must be protected at the same level of each clearance holder. The need to know must be verified by the data owner. Which of the following should the security officer do to meet these requirements?

   • ACreate a rule to authorize personnel only from certain IPs to access the files.
   • BAssign labels to the files and require formal access authorization.
   • CAssign attributes to each file and allow authorized users to share the files.
   • DAssign roles to users and authorize access to files based on the roles.

   Show answer

   Answer: B

   Next question

7. Question 47 · 393 in bank

   A security team receives alerts regarding impossible travel and possible brute-force attacks after normal business hours. After reviewing more logs, the team determines that specific users were targeted and attempts were made to transfer data to an unknown site. Which of the following should the team do to help mitigate these issues?

   • ACreate a firewall rule to prevent those users from accessing sensitive data.
   • BRestrict uploading activity to only authorized sites.
   • CEnable packet captures to continue to run for the source and destination related to the file transfer.
   • DDisable login activity for those users after business hours.

   Show answer

   Answer: B

   Next question

8. Question 48 · 393 in bank

   A company recently acquired a SaaS company and performed a gap analysis. The results of the gap analysis Indicate security controls are absent throughout the SDLC and have led to several vulnerable production releases. Which of the following security tools best reduces the risk of vulnerable code being pushed to production in the future?

   • AStatic application security testing
   • BRegression testing
   • CCode signing
   • DSandboxing

   Show answer

   Answer: A

   Next question

9. Question 49 · 393 in bank

   Which of the following is the best reason for obtaining file hashes from a confiscated laptop?

   • ATo prevent metadata tampering on each file
   • BTo later validate the integrity of each file
   • CTo generate unique identifiers for each file
   • DTo preserve the chain of custody of files

   Show answer

   Answer: B

   Next question

10. Question 50 · 393 in bank

    Select 3

    A security analyst is using data provided from a recent penetration test to calculate CVSS scores to prioritize remediation. Which of the following metric groups would the analyst need to determine to get the overall scores? (Choose three.)

    • ATemporal
    • BAvailability
    • CIntegrity
    • DConfidentiality
    • EBase
    • FEnvironmental
    • GImpact
    • HAttack vector

    Show answer

    Answer: AEF

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

CAS-005 practice, question 41. 393 questions available.