Question 51 · 393 in bank
Which of the following describes how a risk assessment is performed when an organization has a critical vendor that provides multiple products?
Show answer
Answer: A
CompTIA SecurityX393 questions across 40 pages are complete and free, with no account or card.
393 questions in this bank
Free access · progress saved on this device
Which of the following describes how a risk assessment is performed when an organization has a critical vendor that provides multiple products?
Answer: A
A security engineer is performing a vulnerability management scan on multihomed Linux systems. The engineer notices that the vulnerability count is high due to the fact that each vulnerability is multiplied by the number of NICs on each system. Which of the following should the engineer do to deduplicate the vulnerabilities and to associate the vulnerabilities with a particular host?
Answer: B
Which of the following best describes a risk associated with using facial recognition to locally authenticate to a mobile device?
Answer: D
The principal security analyst for a global manufacturer is investigating a security incident related to abnormal behavior in the ICS network. A controller was restarted as part of the troubleshooting process, and the following issue was identified when the controller was restarted: SECURE BOOT FAILED: FIRMWARE MISMATCH EXPECTED UXFDC479 ACTUAL 0x79F31B During the investigation, this modified firmware version was identified on several other controllers at the site. The official vendor firmware versions do not have this checksum. Which of the following stages of the MITRE ATT&CK framework for ICS includes this technique?
Answer: B
A web service provider has just taken on a very large contract that comes with requirements that are currently not being implemented. In order to meet contractual requirements, the company must achieve the following thresholds: 99.99% uptime Load time in 3 seconds - Response time = <1.0 seconds - Starting with the computing environment, which of the following should a security engineer recommend to best meet the requirements? (Choose three.)
Answer: BCD
An analyst is working to address a potential compromise of a corporate endpoint and discovers the attacker accessed a user's credentials. However, it is unclear if the system baseline was modified to achieve persistence. Which of the following would most likely support forensic activities in this scenario?
Answer: B
A company is decommissioning old servers and hard drives that contain sensitive data. Which of the following best protects against data leakage?
Answer: C
An engineer has had scaling issues with a web application hosted on premises and would like to move to a serverless architecture. Which of the following cloud benefits would be best to utilize for this project?
Answer: B
An organization needs to classify its systems and data in accordance with external requirements. Which of the following roles is best qualified to perform this task?
Answer: B
A company is developing an application that will be used to perform e-commerce transactions for a subscription-based service. The application must be able to use previously saved payment methods to perform recurring transactions. Which of the following is the most appropriate?
Answer: A
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
CAS-005 practice, question 51. 393 questions available.
Version 1.0.0. How we source questions