최신CompTIA SecurityX Certification - CAS-005무료샘플문제
문제1
A company that uses containers to run its applications is required to identify vulnerabilities on every container image in a private repository The security team needs to be able to quickly evaluate whether to respond to a given vulnerability Which of the following, will allow the security team to achieve the objective with the last effort?
A company that uses containers to run its applications is required to identify vulnerabilities on every container image in a private repository The security team needs to be able to quickly evaluate whether to respond to a given vulnerability Which of the following, will allow the security team to achieve the objective with the last effort?
정답: C
설명: (KoreaDumps 회원만 볼 수 있음)
문제2
A security architect wants to develop abaseline of security configurations These configurations automatically will be utilized machine is created Which of the following technologies should the security architect deploy to accomplish this goal?
A security architect wants to develop abaseline of security configurations These configurations automatically will be utilized machine is created Which of the following technologies should the security architect deploy to accomplish this goal?
정답: B
설명: (KoreaDumps 회원만 볼 수 있음)
문제3
Company A acquired Company B. During an audit, a security engineer found Company B ' s environment was inadequately patched. In response, Company A placed a firewall between the two environments until Company B ' s infrastructure could be integrated into Company A ' s security program. Which of the following risk-handling techniques was used?
Company A acquired Company B. During an audit, a security engineer found Company B ' s environment was inadequately patched. In response, Company A placed a firewall between the two environments until Company B ' s infrastructure could be integrated into Company A ' s security program. Which of the following risk-handling techniques was used?
정답: D
설명: (KoreaDumps 회원만 볼 수 있음)
문제4
Third partiesnotified a company ' s security team about vulnerabilities in the company ' s application. The security team determined these vulnerabilities were previously disclosed in third-party libraries. Which of the following solutions best addresses the reported vulnerabilities?
Third partiesnotified a company ' s security team about vulnerabilities in the company ' s application. The security team determined these vulnerabilities were previously disclosed in third-party libraries. Which of the following solutions best addresses the reported vulnerabilities?
정답: B
설명: (KoreaDumps 회원만 볼 수 있음)
문제5
An organization with a remote workforce has a new client with the following requirements:
* Consultants need to travel to the client site.
* The company has proprietary information on its hard drives.
* The company prohibits BYOD.
Which of the following would be the most beneficial for the organization to implement?
An organization with a remote workforce has a new client with the following requirements:
* Consultants need to travel to the client site.
* The company has proprietary information on its hard drives.
* The company prohibits BYOD.
Which of the following would be the most beneficial for the organization to implement?
정답: C
설명: (KoreaDumps 회원만 볼 수 있음)
문제6
A security analyst is performing a review of a web application. During testing as a standard user, the following error log appears:
Error Message in Database Connection
Connection to host USA-WebApp-Database failed
Database " Prod-DB01 " not found
Table " CustomerInfo " not found
Please retry your request later
Which of the following best describes the analyst's findings and a potential mitigation technique?
A security analyst is performing a review of a web application. During testing as a standard user, the following error log appears:
Error Message in Database Connection
Connection to host USA-WebApp-Database failed
Database " Prod-DB01 " not found
Table " CustomerInfo " not found
Please retry your request later
Which of the following best describes the analyst's findings and a potential mitigation technique?
정답: C
문제7
During an incident response activity, the response team collected some artifacts from a compromised server, but the following information is missing:
* Source of the malicious files
* Initial attack vector
* Lateral movement activities
The next step in the playbook is to reconstruct a timeline. Which of the following best supports this effort?
During an incident response activity, the response team collected some artifacts from a compromised server, but the following information is missing:
* Source of the malicious files
* Initial attack vector
* Lateral movement activities
The next step in the playbook is to reconstruct a timeline. Which of the following best supports this effort?
정답: D
문제8
A security engineer receives the following findings from a recent security audit:
* Data should be protected based on user permissions and roles.
* User action tracking should be implemented across the network.
* Digital identities should be validated across the data access workflow.
Which of the following is the first action the engineer should take to address the findings?
A security engineer receives the following findings from a recent security audit:
* Data should be protected based on user permissions and roles.
* User action tracking should be implemented across the network.
* Digital identities should be validated across the data access workflow.
Which of the following is the first action the engineer should take to address the findings?
정답: C
설명: (KoreaDumps 회원만 볼 수 있음)
문제9
Employees use their badges to track the number of hours they work. The badge readers cannot be upgraded due to facility constraints. The software for the badge readers uses a legacy platform and requires connectivity to the enterprise resource planning solution. Which of the following is the best to ensure the security of the badge readers?
Employees use their badges to track the number of hours they work. The badge readers cannot be upgraded due to facility constraints. The software for the badge readers uses a legacy platform and requires connectivity to the enterprise resource planning solution. Which of the following is the best to ensure the security of the badge readers?
정답: B
설명: (KoreaDumps 회원만 볼 수 있음)
문제10
An enterprise is deploying APIs that utilize a private key and a public key to ensure the connection string is protected. To connect to the API, customers must use the private key. Which of the following would best secure the REST API connection to the database while preventing the use of a hard-coded string in the request string?
An enterprise is deploying APIs that utilize a private key and a public key to ensure the connection string is protected. To connect to the API, customers must use the private key. Which of the following would best secure the REST API connection to the database while preventing the use of a hard-coded string in the request string?
정답: C
설명: (KoreaDumps 회원만 볼 수 있음)
문제11
Which of the following supports the process of collecting a large pool of behavioral observations to inform decision-making?
Which of the following supports the process of collecting a large pool of behavioral observations to inform decision-making?
정답: B
설명: (KoreaDumps 회원만 볼 수 있음)