CAS-005 practice questions 81–90

1. Question 81 · 393 in bank

   A network engineer recorded the following test results:

   

   After a new network security appliance was deployed, the results of the network test are as follows:

   

   Which of the following network infrastructure components most likely produced these results?

   • AIPS
   • BCDN
   • CVPN
   • DIDS

   Show answer

   Answer: A

   Next question

2. Question 82 · 393 in bank

   A developer needs to improve the cryptographic strength of a password-storage component in a web application without completely replacing the crypto-module. Which of the following is the most appropriate technique?

   • AKey splitting
   • BKey escrow
   • CKey rotation
   • DKey encryption
   • EKey stretching

   Show answer

   Answer: E

   Next question

3. Question 83 · 393 in bank

   A company wants to implement hardware security key authentication for accessing sensitive information systems. The goal is to prevent unauthorized users from gaining access with a stolen password. Which of the following models should the company implement to best solve this issue?

   • ARule-based
   • BTime-based
   • CRole-based
   • DContext-based

   Show answer

   Answer: D

   Next question

4. Question 84 · 393 in bank

   Which of the following is the main reason quantum computing advancements are leading companies and countries to deploy new encryption algorithms?

   • AEncryption systems based on large prime numbers will be vulnerable to exploitation.
   • BZero Trust security architectures will require homomorphic encryption.
   • CPerfect forward secrecy will prevent deployment of advanced firewall monitoring techniques.
   • DQuantum computers will enable malicious actors to capture IP traffic in real time.

   Show answer

   Answer: A

   Next question

5. Question 85 · 393 in bank

   A company is adopting microservice architecture in order to quickly remediate vulnerabilities and deploy to production. All of the microservices run on the same Linux platform. Significant time was spent updating the base OS before deploying code. Which of the following should the company do to make the process efficient?

   • AUse Terraform scripts while creating golden images.
   • BCreate a cron job to run apt-update every 30 days.
   • CUse snapshots to deploy code to existing compute instances.
   • DDeploy a centralized update server.

   Show answer

   Answer: A

   Next question

6. Question 86 · 393 in bank

   Select 2

   During a gap assessment, an organization notes that BYOD usage is a significant risk. The organization implemented administrative policies prohibiting BYOD usage. However, the organization has not implemented technical controls to prevent the unauthorized use of BYOD assets when accessing the organization's resources. Which of the following solutions should the organization implement to best reduce the risk of BYOD devices? (Choose two.)

   • ACloud IAM, to enforce the use of token-based MFA
   • BConditional access, to enforce user-to-device binding
   • CNAC, to enforce device configuration requirements
   • DPAM, to enforce local password policies
   • ESD-WAN, to enforce web content filtering through external proxies
   • FDLP, to enforce data protection capabilities

   Show answer

   Answer: BC

   Next question

7. Question 87 · 393 in bank

   An organization has several systems deployed in a public cloud and wants to confirm that when data retention periods are reached, the data is properly disposed of. Which of the following best meets the organization's needs?

   • ADouble encrypting the data using both asymmetric and symmetric keys managed by the cloud service provider
   • BUtilizing a data-wiping software to overwrite the existing data
   • CEncrypting the data with customer-managed keys and then deleting both the encryption key and the volume
   • DAsking the cloud provider for copies of certificates of destruction

   Show answer

   Answer: C

   Next question

8. Question 88 · 393 in bank

   A security engineer reviews an after-action report from a previous security breach and notes a long lag time between detection and containment of a compromised account. The engineer suggests using SOAR to address this concern. Which of the following best explains the engineer's goal?

   • ATo prevent accounts from being compromised
   • BTo enable log correlation using machine learning
   • CTo orchestrate additional reporting for the security operations center
   • DTo prepare runbooks to automate future incident response

   Show answer

   Answer: D

   Next question

9. Question 89 · 393 in bank

   During an audit at an organization, auditors find that developers are able to promote code to production. The auditors request a full review of all production changes. Which of the following should the organization implement to prevent a full review in the future?

   • ABranch protection
   • BCentralized code repositories
   • CInteractive application security testing
   • DChange control board

   Show answer

   Answer: D

   Next question

10. Question 90 · 393 in bank

    A systems engineer is configuring SSO for a business that will be using SaaS applications for its remote-only workforce. Privileged actions in SaaS applications must be allowed only from corporate mobile devices that meet minimum security requirements, but BYOD must also be permitted for other activity. Which of the following would best meet this objective?

    • ABlock any connections from outside the business's network security boundary.
    • BInstall machine certificates on corporate devices and perform checks against the clients.
    • CConfigure device attestations and continuous authorization controls.
    • DDeploy application protection policies using a corporate, cloud-based MDM solution.

    Show answer

    Answer: D

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

CAS-005 practice, question 81. 393 questions available.