Free CAS-005 – CompTIA SecurityX Certification Practice Test Question

Select all that apply, then click Submit answer.

• ○

  The client can seamlessly move data.

• ○

  The vendor can change product offerings.

• ○

  The client receives a sufficient level of service.

• ○

  The client experiences decreased quality of service.

• ○

  The client can leverage a multicloud approach.

• ○

  The client experiences increased interoperability.

Select all that apply, then click Submit answer.

• ○

  Conduct input sanitization.

• ○

  Deploy a SIEM.

• ○

  Use containers.

• ○

  Patch the OS

• ○

  Deploy a WAF.

• ○

  Deploy a reverse proxy

• ○

  Deploy an IDS.

Select all that apply, then click Submit answer.

• ○

  The clients may not trust idapt by default.

• ○

  The secure LDAP service is not started, so no connections can be made.

• ○

  Danvills.com is under a DDoS-inator attack and cannot respond to OCSP requests.

• ○

  Secure LDAP should be running on UDP rather than TCP.

• ○

  The company is using the wrong port. It should be using port 389 for secure LDAP.

• ○

  Secure LDAP does not support wildcard certificates.

• ○

  The clients may not trust Chicago by default.

Select all that apply, then click Submit answer.

• ○

  Endpoint protection

• ○

  Log aggregator
  Log aggregator: A log aggregator is a tool that collects, parses, and stores logs from various sources, such as devices, applications, servers, etc. A log aggregator can help meet the requirement of retaining logs for 365 days by providing a centralized and scalable storage solution1 .

• ○

  Zero trust network access

• ○

  PAM
  PAM: PAM stands for privileged access management. It is a technology that controls and monitors the access of privileged users (such as administrators) to critical systems and data. PAM can help meet the requirement of controlling and tracking privileged user access by enforcing policies such as least privilege, multifactor authentication, password rotation, session recording, etc. .

• ○

  Cloud sandbox

• ○

  SIEM
  SIEM: SIEM stands for security information and event management. It is a technology that analyzes and correlates logs from various sources to detect and respond to security incidents. SIEM can help meet the requirement of identifying ransomware threats and zero-day vulnerabilities by providing real-time alerts, threat intelligence feeds, incident response workflows, etc. .
  
  

• ○

  NGFW
  

Select all that apply, then click Submit answer.

• ○

  Document interpolation

• ○

  Regular expression pattern matching

• ○

  Optical character recognition functionality

• ○

  Baseline image matching

• ○

  Advanced rasterization

• ○

  Watermarking
  

Select all that apply, then click Submit answer.

• ○

  Implementing a TLS inspection proxy on-path to enable monitoring and policy enforcement

• ○

  Creating a Linux namespace on the telemetry server and adding to it the servicing HTTP daemon

• ○

  Installing and configuring filesystem integrity monitoring service on the telemetry server

• ○

  Implementing an EDR and alert on Identified privilege escalation attempts to the SIEM

• ○

  Subscribing to a UTM service that enforces privacy controls between the internal network and the screened subnet

• ○

  Using the published data schema to monitor and block off nominal telemetry messages
  

Select all that apply, then click Submit answer.

• ○

  Outdated escalation attack

• ○

  Privilege escalation attack

• ○

  VPN on the mobile device

• ○

  Unrestricted email administrator accounts

• ○

  Chief use of UDP protocols

• ○

  Disabled GPS on mobile devices

Select an option, then click Submit answer.

• ○

  NX bit

• ○

  ASLR

• ○

  DEP

• ○

  HSM

Select an option, then click Submit answer.

• ○

  A vulnerability

• ○

  A threat

• ○

  A breach

• ○

  A risk

Select an option, then click Submit answer.

• ○

  Off-boarding

• ○

  Separation of duties

• ○

  Least privilege

• ○

  Job rotation

Select an option, then click Submit answer.

• ○

  a decrypting RSA using obsolete and weakened encryption attack.

• ○

  a zero-day attack.

• ○

  an advanced persistent threat.

• ○

  an on-path attack.

Select an option, then click Submit answer.

• ○

  Simultaneous Authentication of Equals

• ○

  Enhanced open

• ○

  Perfect forward secrecy

• ○

  Extensible Authentication Protocol
  

Select an option, then click Submit answer.

• ○

  Accept

• ○

  Avoid

• ○

  Transfer

• ○

  Mitigate
  

Select an option, then click Submit answer.

• ○

  A turbine would overheat and cause physical harm.

• ○

  The engineers would need to go to the historian.

• ○

  The SCADA equipment could not be maintained.

• ○

  Data would be exfiltrated through the data diodes.
  

Select an option, then click Submit answer.

• ○

  Securely configure the authentication mechanisms
  

• ○

  Patch the infrastructure at the operating system
  

• ○

  Execute port scanning against the services
  

• ○

  Upgrade the service as part of life-cycle management