Practice Test for CAS-004 Certification Real 2023 Mock Exam
Prepare For Realistic CAS-004 Dumps PDF - 100% Passing Guarantee
The CASP+ certification exam covers a wide range of topics, including advanced security concepts, enterprise security architecture, security operations and incident response, technical integration of enterprise components, and research and collaboration. CAS-004 exam is designed to test the candidate's ability to apply their knowledge and skills to real-world scenarios.
NEW QUESTION # 276
A company is preparing to deploy a global service.
Which of the following must the company do to ensure GDPR compliance? (Choose two.)
- A. Provide optional data encryption.
- B. Grant data access to third parties.
- C. Provide alternative authentication techniques.
- D. Inform users regarding what data is stored.
- E. Provide data deletion capabilities.
- F. Provide opt-in/out for marketing messages.
Answer: D,E
Explanation:
Erasure is part of GDPR compliance. A citizen has the right to request their data be deleted.
Reference:
https://gdpr.eu/compliance-checklist-us-companies/
https://www.clouddirect.net/11-things-you-must-do-now-for-gdpr-compliance/
NEW QUESTION # 277
Based on PCI DSS v3.4, One Particular database field can store data, but the data must be unreadable. which of the following data objects meets this requirement?
- A. CVV2
- B. Cardholder name
- C. expiration date
- D. PAN
Answer: D
NEW QUESTION # 278
A security researcher has been given an executable that was captured by a honeypot. Which of the following should the security researcher implement to test the executable?
- A. SAST
- B. OSINT
- C. DAST
- D. OWASP
Answer: C
NEW QUESTION # 279
A company has hired a security architect to address several service outages on the endpoints due to new malware. The Chief Executive Officer's laptop was impacted while working from home. The goal is to prevent further endpoint disruption. The edge network is protected by a web proxy.
Which of the following solutions should the security architect recommend?
- A. Remove the web proxy and install a UTM appliance.
- B. Implement a deny list feature on the endpoints.
- C. Replace the current antivirus with an EDR solution.
- D. Add a firewall module on the current antivirus solution.
Answer: C
NEW QUESTION # 280
A company wants to securely manage the APIs that were developed for its in-house applications.
Previous penetration tests revealed that developers were embedding unencrypted passwords in the code. Which of the following can the company do to address this finding? (Choose two.)
- A. Implement user session logging.
- B. Use SOAP instead of restful services.
- C. Enforce MFA on the developers' workstations and production systems.
- D. Incorporate a DAST into the DevSecOps process to identify the exposure of secrets.
- E. Implement time-based API key management.
- F. Implement complex, key-length API key management.
Answer: C,D
Explanation:
E: Incorporate a DAST (Dynamic Application Security Testing) into the DevSecOps process to identify the exposure of secrets. This will help the company to identify the potential vulnerabilities in the API codes and take necessary measures to address them.
F: Enforce MFA (Multi-Factor Authentication) on the developers' workstations and production systems. This will ensure that the authentication process is more secure and reduce the chances of unencrypted passwords being embedded in the code.
NEW QUESTION # 281
An organization is prioritizing efforts to remediate or mitigate risks identified during the latest assessment. For one of the risks, a full remediation was not possible, but the organization was able to successfully apply mitigations to reduce the likelihood of impact.
Which of the following should the organization perform NEXT?
- A. Update the organization's threat model.
- B. Recalculate the magnitude of impact.
- C. Assess the residual risk.
- D. Move to the next risk in the register.
Answer: B
NEW QUESTION # 282
A cloud engineer is tasked with improving the responsiveness and security of a company's cloud- based web application. The company is concerned that international users will experience increased latency.
Which of the following is the BEST technology to mitigate this concern?
- A. Containerization
- B. Caching
- C. Content delivery network
- D. Clustering
Answer: C
NEW QUESTION # 283
A penetration tester obtained root access on a Windows server and, according to the rules of engagement, is permitted to perform post-exploitation for persistence.
Which of the following techniques would BEST support this?
- A. Configuring systemd services to run automatically at startup
- B. Exploiting an arbitrary code execution exploit
- C. Creating a backdoor
- D. Moving laterally to a more authoritative server/service
Answer: C
Explanation:
A reverse shell is not technically considered a "backdoor", but installation of a modified (backdoor) service could reestablish connection in the event of disconnection.
NEW QUESTION # 284
An organization is implementing a new identity and access management architecture with the following objectives:
Supporting MFA against on-premises infrastructure
Improving the user experience by integrating with SaaS applications
Applying risk-based policies based on location
Performing just-in-time provisioning
Which of the following authentication protocols should the organization implement to support these requirements?
- A. OAuth and OpenID
- B. SAML and RADIUS
- C. OTP and 802.1X
- D. Kerberos and TACACS
Answer: A
NEW QUESTION # 285
Due to locality and budget constraints, an organization's satellite office has a lower bandwidth allocation than other offices in the organization. As a result, the local security infrastructure staff is assessing architectural options that will help preserve network bandwidth and increase speed to both internal and external resources while not sacrificing threat visibility. Which of the following would be the BEST option to implement?
- A. Distributed connection allocation
- B. SD-WAN vertical heterogeneity
- C. Local caching
- D. Content delivery network
Answer: D
Explanation:
A CDN is a network of servers that are distributed across the Internet and are designed to deliver content to users more efficiently. CDNs work by storing copies of content on servers that are located closer to the users who are requesting it, which can help to reduce latency and improve performance.
NEW QUESTION # 286
A company created an external application for its customers. A security researcher now reports that the application has a serious LDAP injection vulnerability that could be leveraged to bypass authentication and authorization.
Which of the following actions would BEST resolve the issue? (Choose two.)
- A. Deploy an IDS.
- B. Deploy a reverse proxy
- C. Deploy a SIEM.
- D. Conduct input sanitization.
- E. Patch the OS
- F. Deploy a WAF.
- G. Use containers.
Answer: D,F
Explanation:
Conduct input sanitization - The only sure way to prevent SQL Injection attacks is input validation and parametrized queries including prepared statements. The application code should never use the input directly. The developer must sanitize all input, not only web form inputs such as login forms.
A WAF protects your web apps by filtering, monitoring, and blocking any malicious HTTP/S traffic traveling to the web application, and prevents any unauthorized data from leaving the app. It does this by adhering to a set of policies that help determine what traffic is malicious and what traffic is safe.
NEW QUESTION # 287
An analyst execute a vulnerability scan against an internet-facing DNS server and receives the following report:
Which of the following tools should the analyst use FIRST to validate the most critical vulnerability?
- A. Account enumerator
- B. Port scanner
- C. Exploitation framework
- D. Password cracker
Answer: D
NEW QUESTION # 288
A company has decided to purchase a license for software that is used to operate a mission-critical process. The third-party developer is new to the industry but is delivering what the company needs at this time.
Which of the following BEST describes the reason why utilizing a source code escrow will reduce the operational risk to the company if the third party stops supporting the application?
- A. The company will be able to manage the third-party developer's development process.
- B. The company will be able to force the third-party developer to continue support.
- C. The company will be paid by the third-party developer to hire a new development team.
- D. The company will have access to the latest version to continue development.
Answer: B
NEW QUESTION # 289
A junior developer is informed about the impact of new malware on an Advanced RISC Machine (ARM) CPU, and the code must be fixed accordingly. Based on the debug, the malware is able to insert itself in another process memory location.
Which of the following technologies can the developer enable on the ARM architecture to prevent this type of malware?
- A. No-execute
- B. Execute never
- C. Total memory encryption
- D. Virtual memory encryption
Answer: B
Explanation:
XN is a security feature that is designed to prevent certain types of malware from executing in memory. When XN is enabled, the CPU will not execute code that is stored in memory regions that have been marked as XN. This can help to prevent malware from inserting itself into another process's memory location and executing from there.
No-execute (NX) is a similar security feature that is used to prevent certain types of malware from executing in memory. NX works by marking certain memory regions as non-executable, so that the CPU will not execute code from those regions.
NEW QUESTION # 290
A company publishes several APIs for customers and is required to use keys to segregate customer data sets.
Which of the following would be BEST to use to store customer keys?
- A. A localized key store
- B. A hardware security module
- C. A trusted platform module
- D. A public key infrastructure
Answer: A
NEW QUESTION # 291
A security consultant needs to set up wireless security for a small office that does not have Active Directory. Despite the lack of central account management, the office manager wants to ensure a high level of defense to prevent brute-force attacks against wireless authentication.
Which of the following technologies would BEST meet this need?
- A. WPA2 PSK
- B. Faraday cage
- C. WPA3 SAE
- D. WEP 128 bit
Answer: C
Explanation:
WPA3 SAE (Simultaneous Authentication of Equals) is the best option for this scenario. WPA3 is the latest version of the Wi-Fi security standard, and it provides a more secure form of encryption than WPA2 PSK and WEP 128 bit. WPA3 SAE is designed to protect against brute-force attacks and is the most secure choice for this particular situation.
NEW QUESTION # 292
A company wants to configure its wireless network to require username and password authentication. Which of the following should the system administrator implement?
- A. WPS
- B. TKIP
- C. PEAP
- D. PKI
Answer: C
NEW QUESTION # 293
......
Download CAS-004 Exam Dumps Questions to get 100% Success: https://www.test4engine.com/CAS-004_exam-latest-braindumps.html
Check the Available CAS-004 Exam Dumps with 472 QA's: https://drive.google.com/open?id=1NHs05JvSjdTdX4WyMksxXRO_0G5VxbZ0