[2024年12月05日] 更新されたCAS-005試験PDF問題集にはPassTest合格保証付き [Q66-Q87]

新問題 66
A security team is responding to malicious activity and needs to determine the scope of impact the malicious activity appears to affect certain version of an application used by the organization Which of the following actions best enables the team to determine the scope of Impact?

Performing a port scan

Inspecting egress network traffic

Reviewing the asset inventory

Analyzing user behavior

新問題 67
During a forensic review of a cybersecurity incident, a security engineer collected a portion of the payload used by an attacker on a comprised web server Given the following portion of the code:

Which of the following best describes this incident?

XSRF attack

Command injection

Stored XSS

SQL injection

新問題 68
A company recently experienced an incident in which an advanced threat actor was able to shim malicious code against the hardware static of a domain controller The forensic team cryptographically validated that com the underlying firmware of the box and the operating system had not been compromised. However, the attacker was able to exfiltrate information from the server using a steganographic technique within LOAP.
Which of the following is me best way to reduce the risk oi reoccurrence?

Enforcing allow lists for authorized network pons and protocols

Measuring and attesting to the entire boot chum

Rolling the cryptographic keys used for hardware security modules

Using code signing to verify the source of OS updates

新問題 69
Audit findings indicate several user endpoints are not utilizing full disk encryption During me remediation process, a compliance analyst reviews the testing details for the endpoints and notes the endpoint device configuration does not support full disk encryption Which of the following is the most likely reason me device must be replaced’

The HSM is outdated and no longer supported by the manufacturer

The vTPM was not properly initialized and is corrupt.

The HSM is vulnerable to common exploits and a firmware upgrade is needed

The motherboard was not configured with a TPM from the OEM supplier.

The HSM does not support sealing storage

新問題 70
Which of the following best describes the challenges associated with widespread adoption of homomorphic encryption techniques?

Incomplete mathematical primitives

No use cases to drive adoption

Quantum computers not yet capable

insufficient coprocessor support

新問題 71
A company is having issues with its vulnerability management program New devices/lPs are added and dropped regularly, making the vulnerability report inconsistent Which of the following actions should the company lake to most likely improve the vulnerability management process’

Request a weekly report with all new assets deployed and decommissioned

Extend the DHCP lease lime to allow the devices to remain with the same address for a longer period.

Implement a shadow IT detection process to avoid rogue devices on the network

Perform regular discovery scanning throughout the 11 landscape using the vulnerability management tool

新問題 72
Recent repents indicate that a software tool is being exploited Attackers were able to bypass user access controls and load a database. A security analyst needs to find the vulnerability and recommend a mitigation.
The analyst generates the following output:

Which of the following would the analyst most likely recommend?

Installing appropriate EDR tools to block pass-the-hash attempts

Adding additional time to software development to perform fuzz testing

Removing hard coded credentials from the source code

Not allowing users to change their local passwords

新問題 73
Asecuntv administrator is performing a gap assessment against a specific OS benchmark The benchmark requires the following configurations be applied to endpomts:
* Full disk encryption
* Host-based firewall
* Time synchronization
* Password policies
* Application allow listing
* Zero Trust application access
Which of the following solutions best addresses the requirements? (Select two).

CASB

SBoM

SCAP

SASE

HIDS

新問題 74
A security analyst is troubleshooting the reason a specific user is having difficulty accessing company resources The analyst reviews the following information:

Which of the following is most likely the cause of the issue?

The local network access has been configured to bypass MFA requirements.

A network geolocation is being misidentified by the authentication server

Administrator access from an alternate location is blocked by company policy

Several users have not configured their mobile devices to receive OTP codes

新問題 75
Users are willing passwords on paper because of the number of passwords needed in an environment. Which of the following solutions is the best way to manage this situation and decrease risks?

Increasing password complexity to require 31 least 16 characters

implementing an SSO solution and integrating with applications

Requiring users to use an open-source password manager

Implementing an MFA solution to avoid reliance only on passwords

新問題 76
A systems engineer is configuring a system baseline for servers that will provide email services. As part of the architecture design, the engineer needs to improve performance of the systems by using an access vector cache, facilitating mandatory access control and protecting against:
* Unauthorized reading and modification of data and programs
* Bypassing application security mechanisms
* Privilege escalation
* interference with other processes
Which of the following is the most appropriate for the engineer to deploy?

SELinux

Privileged access management

Self-encrypting disks

NIPS

新問題 77
A security architect is establishing requirements to design resilience in un enterprise system trial will be extended to other physical locations. The system must
* Be survivable to one environmental catastrophe
* Re recoverable within 24 hours of critical loss of availability
* Be resilient to active exploitation of one site-to-site VPN solution

Load-balance connection attempts and data Ingress at internet gateways

Allocate fully redundant and geographically distributed standby sites.

Employ layering of routers from diverse vendors

Lease space to establish cold sites throughout other countries

Use orchestration to procure, provision, and transfer application workloads lo cloud services

Implement full weekly backups to be stored off-site for each of the company’s sites

新問題 78
A security architect wants to develop a baseline of security configurations These configurations automatically will be utilized machine is created Which of the following technologies should the security architect deploy to accomplish this goal?

Short

GASB

Ansible

CMDB

新問題 79
A security analyst received a report that an internal web page is down after a company-wide update to the web browser Given the following error message:

Which of the following is the best way to fix this issue?

Rewriting any legacy web functions

Disabling all deprecated ciphers

Blocking all non-essential pons

Discontinuing the use of self-signed certificates

新問題 80
An organization is implementing Zero Trust architecture A systems administrator must increase the effectiveness of the organization’s context-aware access system. Which of the following is the best way to improve the effectiveness of the system?

Secure zone architecture

Always-on VPN

Accurate asset inventory

Microsegmentation

新問題 81
Which of the following best explains the importance of determining organization risk appetite when operating with a constrained budget?

Risk appetite directly impacts acceptance of high-impact low-likelihood events.

Organizational risk appetite varies from organization to organization

Budgetary pressure drives risk mitigation planning in all companies

Risk appetite directly influences which breaches are disclosed publicly

新問題 82
A company detects suspicious activity associated with external connections Security detection tools are unable to categorize this activity. Which of the following is the best solution to help the company overcome this challenge?

Implement an Interactive honeypot

Map network traffic to known loCs.

Monitor the dark web

implement UEBA

新問題 83
A security professional is investigating a trend in vulnerability findings for newly deployed cloud systems Given the following output:

Which of the following actions would address the root cause of this issue?

Automating the patching system to update base Images

Recompiling the affected programs with the most current patches

Disabling unused/unneeded ports on all servers

Deploying a WAF with virtual patching upstream of the affected systems

新問題 84
A network engineer must ensure that always-on VPN access is enabled Curt restricted to company assets Which of the following best describes what the engineer needs to do”

Generate device certificates using the specific template settings needed

Modify signing certificates in order to support IKE version 2

Create a wildcard certificate for connections from public networks

Add the VPN hostname as a SAN entry on the root certificate

新問題 85
A financial services organization is using Al lo fully automate the process of deciding client loan rates Which of the following should the organization be most concerned about from a privacy perspective?

Model explainability

Credential Theft

Possible prompt Injections

Exposure to social engineering

新問題 86
A financial technology firm works collaboratively with business partners in the industry to share threat intelligence within a central platform This collaboration gives partner organizations the ability to obtain and share data associated with emerging threats from a variety of adversaries Which of the following should the organization most likely leverage to facilitate this activity? (Select two).

CWPP

YAKA

ATTACK

STIX

TAXII

JTAG

新問題 87
An organization is looking for gaps in its detection capabilities based on the APTs that may target the industry Which of the following should the security analyst use to perform threat modeling?

ATT&CK

OWASP

CAPEC

STRIDE