Feb-2022 CompTIA CAS-004 Certification Real 2022 Mock Exam
CAS-004 Exam Questions and Valid PMP Dumps PDF
CompTIA CAS-004 Exam Syllabus Topics:
| Topic | Details |
|---|---|
Security Architecture 29% | |
| Given a scenario, analyze the security requirements and objectives to ensure an appropriate, secure network architecture for a new or existing network. | - Services
|
| Given a scenario, analyze the organizational requirements to determine the proper infrastructure security design. | - Scalability
- Resiliency
- Automation
- Containerization - Virtualization - Content delivery network - Caching |
| Given a scenario, integrate software applications securely into an enterprise architecture. | - Baseline and templates
|
| Given a scenario, implement data security techniques for securing enterprise architecture. | - Data loss prevention
- Encrypted vs. unencrypted - Data life cycle
- Data integrity management - Data storage, backup, and recovery
|
| Given a scenario, analyze the security requirements and objectives to provide the appropriate authentication and authorization controls. | - Credential management
- Password policies
- Federation
- One-time password (OTP)
|
| Given a set of requirements, implement secure cloud and virtualization solutions. | - Virtualization strategies
- Middleware - Metadata and tags - Deployment models and considerations
- Service models
- Cloud provider limitations
- Storage models
|
| Explain how cryptography and public key infrastructure (PKI) support security objectives and requirements. | - Privacy and confidentiality requirements - Integrity requirements - Non-repudiation - Compliance and policy requirements - Common cryptography use cases
- Common PKI use cases
|
| Explain the impact of emerging technologies on enterprise security and privacy. | - Artificial intelligence - Machine learning - Quantum computing - Blockchain - Homomorphic encryption
- Secure multiparty computation
-Biometric impersonation |
Security Operations 30% | |
| Given a scenario, perform threat management activities. | - Intelligence types
- Actor types
- Threat actor properties
- Intelligence collection methods
|
| Given a scenario, analyze indicators of compromise and formulate an appropriate response. | - Indicators of compromise
- Response
|
| Given a scenario, perform vulnerability management activities. | - Vulnerability scans
- Patch management - Information sources
|
| Given a scenario, use the appropriate vulnerability assessment and penetration testing methods and tools. | - Methods
- Tools
- Dependency management
|
| Given a scenario, analyze vulnerabilities and recommend risk mitigations. | - Vulnerabilities
- Inherently vulnerable system/application
|
| Given a scenario, use processes to reduce risk. | - Proactive and detection
- Security data analytics
- Preventive
|
| Given an incident, implement the appropriate response. | - Event classifications
- Preescalation tasks - Incident response process
- Stakeholder management |
| Explain the importance of forensic concepts. | - Legal vs. internal corporate purposes - Forensic process
- Cryptanalysis - Steganalysis |
| Given a scenario, use forensic analysis tools. | - File carving tools
- Binary analysis tools
- Analysis tools
|
Security Engineering and Cryptography 26% | |
| Given a scenario, apply secure configurations to enterprise mobility | - Managed configurations
|
| Given a scenario, configure and implement endpoint security controls. | - Hardening techniques
|
| Explain security considerations impacting specific sectors and operational technologies. | - Embedded
|
| Explain how cloud technology adoption impacts organizational security. | - Automation and orchestration- Encryption configuration - Logs
- Monitoring configurations
- Application virtualization - Software-defined networking - Misconfigurations - Collaboration tools - Storage configurations
|
NEW QUESTION 61
A company's employees are not permitted to access company systems while traveling internationally. The company email system is configured to block logins based on geographic location, but some employees report their mobile phones continue to sync email traveling . Which of the following is the MOST likely explanation? (Select TWO.)
- A. Unrestricted email administrator accounts
- B. Chief use of UDP protocols
- C. VPN on the mobile device
- D. Privilege escalation attack
- E. Outdated escalation attack
- F. Disabled GPS on mobile devices
Answer: C,F
NEW QUESTION 62
A security analyst is reviewing the following output:
Which of the following would BEST mitigate this type of attack?
- A. Installing a network firewall
- B. Placing a WAF inline
- C. Implementing an IDS
- D. Deploying a honeypot
Answer: A
NEW QUESTION 63
A university issues badges through a homegrown identity management system to all staff and students. Each week during the summer, temporary summer school students arrive and need to be issued a badge to access minimal campus resources. The security team received a report from an outside auditor indicating the homegrown system is not consistent with best practices in the security field and leaves the institution vulnerable.
Which of the following should the security team recommend FIRST?
- A. Investigating a potential threat identified in logs related to the identity management system
- B. Updating the identity management system to use discretionary access control
- C. Working with procurement and creating a requirements document to select a new IAM system/vendor
- D. Beginning research on two-factor authentication to later introduce into the identity management system
Answer: A
NEW QUESTION 64
A company's SOC has received threat intelligence about an active campaign utilizing a specific vulnerability. The company would like to determine whether it is vulnerable to this active campaign.
Which of the following should the company use to make this determination?
- A. A system penetration test
- B. Log analysis within the SIEM tool
- C. The Cyber Kill Chain
- D. Threat hunting
Answer: A
NEW QUESTION 65
A cybersecurity analyst receives a ticket that indicates a potential incident is occurring. There has been a large in log files generated by a generated by a website containing a ''Contact US'' form. The analyst must determine if the increase in website traffic is due to a recent marketing campaign of if this is a potential incident. Which of the following would BEST assist the analyst?
- A. Running the website log files through a log reduction and analysis tool
- B. Checking for new rules from the inbound network IPS vendor
- C. Deploy a WAF in front of the public website
- D. Ensuring proper input validation is configured on the ''Contact US'' form
Answer: A
NEW QUESTION 66
All staff at a company have started working remotely due to a global pandemic. To transition to remote work, the company has migrated to SaaS collaboration tools. The human resources department wants to use these tools to process sensitive information but is concerned the data could be:
Leaked to the media via printing of the documents
Sent to a personal email address
Accessed and viewed by systems administrators
Uploaded to a file storage site
Which of the following would mitigate the department's concerns?
- A. Watermarking, forward proxy, DLP, and MFA
- B. Data loss detection, reverse proxy, EDR, and PGP
- C. Proxy, secure VPN, endpoint encryption, and AV
- D. VDI, proxy, CASB, and DRM
Answer: D
NEW QUESTION 67
Which of the following BEST sets expectation between the security team and business units within an organization?
- A. Memorandum of understanding
- B. Risk assessment
- C. Business impact analysis
- D. Business partnership agreement
- E. Services level agreement
Answer: C
NEW QUESTION 68
A company plans to build an entirely remote workforce that utilizes a cloud-based infrastructure. The Chief Information Security Officer asks the security engineer to design connectivity to meet the following requirements:
Only users with corporate-owned devices can directly access servers hosted by the cloud provider.
The company can control what SaaS applications each individual user can access.
User browser activity can be monitored.
Which of the following solutions would BEST meet these requirements?
- A. API gateway, UEM, and forward proxy
- B. SSL tunnel, DLP, and host-based firewall
- C. IAM gateway, MDM, and reverse proxy
- D. VPN, CASB, and secure web gateway
Answer: D
NEW QUESTION 69
A Chief information Security Officer (CISO) has launched to create a rebuts BCP/DR plan for the entire company. As part of the initiative , the security team must gather data supporting s operational importance for the applications used by the business and determine the order in which the application must be back online. Which of the following be the FIRST step taken by the team?
- A. Perform a review of all policies an procedures related to BGP a and DR and created an educated educational module that can be assigned to at employees to provide training on BCP/DR events.
- B. Implement replication of all servers and application data to back up detacenters that are geographically from the central datacenter and release an upload BPA to all clients.
- C. Have each business unit conduct a BIA and categories the application according to the cumulative data gathered.
- D. Create an SLA for each application that states when the application will come back online and distribute this information to the business units.
Answer: C
NEW QUESTION 70
A security analyst is investigating a possible buffer overflow attack. The following output was found on a user's workstation:
graphic.linux_randomization.prg
Which of the following technologies would mitigate the manipulation of memory segments?
- A. ASLR
- B. HSM
- C. NX bit
- D. DEP
Answer: A
NEW QUESTION 71
A company is migrating from company-owned phones to a BYOD strategy for mobile devices. The pilot program will start with the executive management team and be rolled out to the rest of the staff in phases. The company's Chief Financial Officer loses a phone multiple times a year.
Which of the following will MOST likely secure the data on the lost device?
- A. Require a VPN to be active to access company data.
- B. Remotely wipe the device.
- C. Require MFA to access company applications.
- D. Set up different profiles based on the person's risk.
Answer: C
NEW QUESTION 72
Immediately following the report of a potential breach, a security engineer creates a forensic image of the server in question as part of the organization incident response procedure. Which of the must occur to ensure the integrity of the image?
- A. A duplicate copy of the image must be maintained
- B. The disk containing the image must be placed in a seated container.
- C. The image must be password protected against changes.
- D. A hash value of the image must be computed.
Answer: D
NEW QUESTION 73
The Chief information Security Officer (CISO) of a small locate bank has a compliance requirement that a third-party penetration test of the core banking application must be conducted annually. Which of the following services would fulfill the compliance requirement with the LOWEST resource usage?
- A. Red-team hunting
- B. Gray-box testing
- C. Blue-learn exercises
- D. White-box testing
- E. Black-box testing
Answer: A
NEW QUESTION 74
A technician is reviewing the logs and notices a large number of files were transferred to remote sites over the course of three months. This activity then stopped. The files were transferred via TLS-protected HTTP sessions from systems that do not send traffic to those sites.
The technician will define this threat as:
- A. a decrypting RSA using obsolete and weakened encryption attack.
- B. an advanced persistent threat.
- C. an on-path attack.
- D. a zero-day attack.
Answer: A
NEW QUESTION 75
A small company recently developed prototype technology for a military program. The company's security engineer is concerned about potential theft of the newly developed, proprietary information.
Which of the following should the security engineer do to BEST manage the threats proactively?
- A. Join an information-sharing community that is relevant to the company.
- B. Use OSINT techniques to evaluate and analyze the threats.
- C. Leverage the MITRE ATT&CK framework to map the TTR.
- D. Update security awareness training to address new threats, such as best practices for data security.
Answer: D
NEW QUESTION 76
A security engineer estimates the company's popular web application experiences 100 attempted breaches per day. In the past four years, the company's data has been breached two times.
Which of the following should the engineer report as the ARO for successful breaches?
- A. 0
- B. 0.5
- C. 1
- D. 36,500
Answer: B
NEW QUESTION 77
A cybersecurity analyst created the following tables to help determine the maximum budget amount the business can justify spending on an improved email filtering system:
Which of the following meets the budget needs of the business?
- A. Filter TUV
- B. Filter ABC
- C. Filter GHI
- D. Filter XYZ
Answer: C
NEW QUESTION 78
......
CompTIA CASP+ Exam Certification Details:
| Sample Questions | CompTIA CASP+ Sample Questions |
| Exam Name | CompTIA Advanced Security Practitioner (CASP+) |
| Number of Questions | 90 |
| Books / Training | CASP+ CAS-004 |
CAS-004 Question Bank: Free PDF Download Recently Updated Questions: https://www.dumpsmaterials.com/CAS-004-real-torrent.html
CAS-004 Brain Dump: A Study Guide with Tips & Tricks for passing Exam: https://drive.google.com/open?id=10AZvPxy75dfvd42mLkuK6gtghv6vTy4P
