CAS-004無料問題集「CompTIA Advanced Security Practitioner (CASP+)」

質問 1

A significant weather event caused all systems to fail over to the disaster recovery site successfully. However, successful data replication has not occurred in the last six months, which has resulted in the service being unavailable. V*Vh1ch of the following would BEST prevent this scenario from happening again?

（A）Performing routine tabletop exercises

（B）Performing department disaster recovery walk-throughs

（C）Implementing scheduled, full interruption tests

（D）Backing up system log reviews

正解：C 解答を投票する

質問 2

In support of disaster recovery objectives, a third party agreed to provide 99.999% uptime. Recently, a hardware failure impacted a firewall without service degradation. Which of the following resiliency concepts was most likely in place?

（A）Clustering

（B）Redundancy

（C）Replication

（D）High availability

正解：D 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 3

In order to save money, a company has moved its data to the cloud with a low-cost provider. The company did not perform a security review prior to the move; however, the company requires all of its data to be stored within the country where the headquarters is located. A new employee on the security team has been asked to evaluate the current provider against the most important requirements. The current cloud provider that the company is using offers:
* Only multitenant cloud hosting
* Minimal physical security
* Few access controls
* No access to the data center
The following information has been uncovered:
* The company is located in a known floodplain, which flooded last year.
* Government regulations require data to be stored within the country.
Which of the following should be addressed first?

（A）Establish a new service-level agreement with the cloud provider.

（B）Establish a new memorandum of understanding with the cloud provider.

（C）Provision services according to the appropriate legal requirements.

（D）Update the disaster recovery plan to account for natural disasters.

正解：C 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 4

A technician is reviewing the logs and notices a large number of files were transferred to remote sites over the course of three months. This activity then stopped. The files were transferred via TLS-protected HTTP sessions from systems that do not send traffic to those sites.
The technician will define this threat as:

（A）a decrypting RSA using obsolete and weakened encryption attack.

（B）an on-path attack.

（C）a zero-day attack.

（D）an advanced persistent threat.

正解：D 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 5

An engineering team is developing and deploying a fleet of mobile devices to be used for specialized inventory management purposes. These devices should:
* Be based on open-source Android for user familiarity and ease.
* Provide a single application for inventory management of physical assets.
* Permit use of the camera be only the inventory application for the purposes of scanning
* Disallow any and all configuration baseline modifications.
* Restrict all access to any device resource other than those requirement ?

（A）Swap out Android Linux kernel version for >2,4,0, but the internet build Android, remove unnecessary functions via MDL, configure to block network access, and perform integration testing

（B）Build and install an Android middleware policy with requirements added, copy the file into/ user/init, and then built the inventory application.

（C）Write a MAC sepolicy that defines domains with rules, label the inventory application, build the policy, and set to enforcing mode.

（D）Set an application wrapping policy, wrap the application, distributes the inventory APK via the MAM tool, and test the application restrictions.

正解：D 解答を投票する

質問 6

The Chief information Officer (CIO) asks the system administrator to improve email security at the company based on the following requirements:
* Transaction being requested by unauthorized individuals.
* Complete discretion regarding client names, account numbers, and investment information.
* Malicious attackers using email to malware and ransomeware.
* Exfiltration of sensitive company information.
The cloud-based email solution will provide anti-malware reputation-based scanning, signature-based scanning, and sandboxing. Which of the following is the BEST option to resolve the boar's concerns for this email migration?

（A）SSL VPN

（B）Endpoint detection response

（C）Data loss prevention

（D）Application whitelisting

正解：C 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 7

An application server was recently upgraded to prefer TLS 1.3, and now users are unable to connect their clients to the server. Attempts to reproduce the error are confirmed, and clients are reporting the following:
ERR_SSL_VERSION_OR_CIPHER_MISMATCH
Which of the following is MOST likely the root cause?

（A）The client application is testing PFS.

（B）The client application is configured to use AES-256 in GCM.

（C）The client application is configured to use RC4.

（D）The client application is configured to use ECDHE.

正解：C 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 8

A security engineer thinks the development team has been hard-coding sensitive environment variables in its code.
Which of the following would BEST secure the company's CI/CD pipeline?

（A）Deploying instance tagging

（B）Performing DAST on a weekly basis

（C）Introducing the use of container orchestration

（D）Utilizing a trusted secrets manager

正解：D 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 9

A Chief Information Officer (CIO) wants to implement a cloud solution that will satisfy the following requirements:
Support all phases of the SDLC.
Use tailored website portal software.
Allow the company to build and use its own gateway software.
Utilize its own data management platform.
Continue using agent-based security tools.
Which of the following cloud-computing models should the CIO implement?

（A）SaaS

（B）PaaS

（C）IaaS

（D）MaaS

正解：C 解答を投票する

質問 10

A security solution uses a sandbox environment to execute zero-day software and collect indicators of compromise. Which of the following should the organization do to BEST take advantage of this solution?

（A）Deliver an updated threat signature throughout the EDR system

（B）Include the signature in the vulnerability scanning tool.

（C）Develop an Nmap plug-in to detect the indicator of compromise.

（D）Update the organization's group policy.

正解：A 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 11

A recent data breach revealed that a company has a number of files containing customer data across its storage environment. These files are individualized for each employee and are used in tracking variouscustomer orders, inquiries, and issues. The files are not encrypted and can be accessed by anyone. The senior management team would like to address these issues without interrupting existing processes.
Which of the following should a security architect recommend?

（A）An ERP program to identify which processes need to be tracked

（B）A DLP program to identify which files have customer data and delete them

（C）A CRM application to consolidate the data and provision access based on the process and need

（D）A CMDB to report on systems that are not configured to security baselines

正解：C 解答を投票する

質問 12

A network security engineer is designing a three-tier web architecture that will allow a third-party vendor to perform the following audit functions within the organization's cloud environment
* Review communication between all infrastructure endpoints
* Identify unauthorized and malicious data patterns
* Perform automated, risk-mitigating configuration changes
Which of the following should the network security engineer include in the design to address these requirements?

（A）Network flow

（B）Network edge NIPS

（C）Traffic mirroring

（D）Centralized syslog

正解：C 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 13

A security engineer is creating a single CSR for the following web server hostnames:
* wwwint internal
* www company com
* home.internal
* www internal
Which of the following would meet the requirement?

（A）Issuer

（B）CN

（C）SAN

（D）CA

（E）CRL

正解：C 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

CAS-004 無料問題集「CompTIA Advanced Security Practitioner (CASP+)」

弊社を連絡する

関連リンク

トップ試験