CAS-005 Certification Exam Questions with AI Explanations

QUESTION: 65

A security engineer would like to control configurations on mobile devices while fulfilling the following requirements:
Support and control Apple and Android devices.

The device must be corporate-owned.

Which of the following would enable the engineer to meet these requirements? (Choose two.)

Create a group policy to lock down mobile devices.
Update verbiage in the acceptable use policy for the internet.
Implement an MDM solution.
Implement a captive portal solution.
Update policy to prohibit the use of BYOD devices.
Implement a RADIUS solution.

Answer(s): C,E

Explanation:

Implement an MDM solution (Mobile Device Management): An MDM solution is specifically designed to manage, monitor, and secure mobile devices. It allows organizations to enforce configuration policies, enforce encryption, restrict apps, and control access to corporate resources on both Apple and Android devices. This solution directly meets the requirement to support and control corporate-owned devices.
Update policy to prohibit the use of BYOD devices: By prohibiting the use of Bring Your Own Device (BYOD) devices, the organization ensures that only corporate-owned devices are used, fulfilling the requirement that the devices must be corporate-owned. This policy helps maintain control over the mobile devices within the organization's environment.

Reveal Solution Next Question

QUESTION: 66

A pharmaceutical company uses a cloud provider to host thousands of independent resources in object storage. The company needs a practical and effective means of discovering data, monitoring changes, and identifying suspicious activity.
Which of the following would best meet these requirements?

A machine-learning-based data security service
A file integrity monitoring service
A cloud configuration assessment and compliance service
An automated data classification system

Answer(s): A

Explanation:

A machine-learning-based data security service would be the best solution for discovering data, monitoring changes, and identifying suspicious activity in the context of a cloud-based object storage environment. Such a service can analyze patterns in data access and usage to identify anomalies, suspicious behavior, and potential security incidents. Machine learning models can continuously learn and adapt to new behaviors, making it effective at detecting emerging threats in real time.

Reveal Solution Next Question

QUESTION: 67

A security analyst is assessing a new application written in Java. The security analyst must determine which vulnerabilities exist during runtime.
Which of the following would provide the most exhaustive list of vulnerabilities while meeting the objective?

Input validation
Dynamic analysis
Side-channel analysis
Fuzz testing
Static analysis

Answer(s): B

Explanation:

Dynamic analysis is the most appropriate technique for assessing vulnerabilities during runtime. It involves testing the application while it is running, which allows the security analyst to observe the application's behavior, detect vulnerabilities that emerge during execution, and understand how the application interacts with its environment. This provides a comprehensive view of vulnerabilities that may not be detected through static code analysis, as it accounts for issues like memory corruption, data leaks, and runtime exceptions.

Reveal Solution Next Question

QUESTION: 68

Recently, two large engineering companies in the same line of business decided to approach cyberthreats in a united way.
Which of the following best describes this unified approach?

Answer(s): D

Explanation:

An MOU (Memorandum of Understanding) is the best choice in this scenario, as it represents an agreement between two parties outlining the intention to collaborate or work together on a common goal, without creating legally binding obligations. In this case, the two engineering companies are uniting to approach cyberthreats in a unified way, and an MOU would formalize this cooperative arrangement and define the terms of their collaboration.

Reveal Solution Next Question

QUESTION: 69

A regulated company is in the process of refreshing its entire infrastructure. The company has a business- critical process running on an old 2008 Windows server. If this server fails, the company would lose millions of dollars in revenue.
Which of the following actions should the company should take?

Accept the risk as the cost of doing business.
Create an organizational risk register for project prioritization.
Implement network compensating controls.
Purchase insurance to offset the cost if a failure occurred.

Answer(s): B

Explanation:

The most appropriate action is to create an organizational risk register for project prioritization. This helps the company document and assess risks, prioritize critical systems, and determine which systems, such as the old 2008 Windows server running a business-critical process, need to be addressed most urgently. A risk register ensures that resources are allocated properly and that mitigation plans are in place for the most critical systems to prevent revenue loss in the event of a failure.

Reveal Solution Next Question

QUESTION: 70

A security engineer needs to ensure production containers are automatically scanned for vulnerabilities before they are accepted into the production environment.
Which of the following should the engineer use to automatically incorporate vulnerability scanning on every commit?

Code repository
CI/CD pipeline
Integrated development environment
Container orchestrator

Answer(s): B

Explanation:

The best solution for automatically scanning containers for vulnerabilities before they are accepted into the production environment is to incorporate vulnerability scanning into the CI/CD pipeline. Continuous Integration (CI) and Continuous Deployment (CD) pipelines can be configured to automatically trigger security scans, including container vulnerability assessments, every time code is committed or changes are pushed. This ensures that vulnerabilities are detected early in the development cycle before the containers are deployed to production.

Reveal Solution Next Question

QUESTION: 71

A security architect recommends replacing the company's monolithic software application with a containerized solution. Historically, secrets have been stored in the application's configuration files.
Which of the following changes should the security architect make in the new system?

Use a secrets management tool.
Save secrets in key escrow.
Store the secrets inside the Dockerfiles.
Run all Dockerfiles in a randomized namespace.

Answer(s): A

Explanation:

A secrets management tool is the most appropriate solution for securely managing and storing secrets (such as API keys, passwords, or tokens) in the new containerized environment. Secrets management tools, such as HashiCorp Vault, AWS Secrets Manager, or Azure Key Vault, provide secure storage, access control, and audit logs for secrets. They are designed to manage secrets in a way that avoids hardcoding sensitive data in configuration files or Dockerfiles, which could be exposed or compromised.

Reveal Solution Next Question

QUESTION: 72

A security engineer is assessing a new tool to segment data and communications between domains. The assessment must determine how data transmission controls can be bypassed without detection.
Which of the following techniques should the security engineer use?

Machine-learning statistical analysis
Fuzz testing
Covert channel analysis
Protocol analysis

Answer(s): C

Explanation:

Covert channel analysis is the technique best suited for assessing how data transmission controls can be bypassed without detection. Covert channels involve using a system or communication protocol in unintended ways to transmit data secretly. This analysis helps identify potential hidden channels that might bypass security controls and allow unauthorized communication between domains.

Reveal Solution Next Question

CompTIA SecurityX CAS-005 Dumps in PDF

Free CompTIA CAS-005 Real Questions (page: 21)

QUESTION: 65

Explanation:

QUESTION: 66

Explanation:

QUESTION: 67

Explanation:

QUESTION: 68

Explanation:

QUESTION: 69

Explanation:

QUESTION: 70

Explanation:

QUESTION: 71

Explanation:

QUESTION: 72

Explanation: