No Result
View All Result
Quesions Library
Contribute
No Result
View All Result
No Result
View All Result

 


Questions › Category: CAS-003
Filter:AllUnanswered
Due to a recent breach, the Chief Executive Officer (CEO) has requested the following activities be conducted during incident response planning: ✑ Involve business owners and stakeholders ✑ Create an applicable scenario ✑ Conduct a biannual verbal review of the incident response plan ✑ Report on the lessons learned and gaps identified Which of the following exercises has the CEO requested?
Admin asked 9 months ago • 
81 views0 answers0 votes
A security researcher is gathering information about a recent spoke in the number of targeted attacks against multinational banks. The spike is on top of already sustained attacks against the banks. Some of the previous attacks have resulted in the loss of sensitive data, but as of yet the attackers have not successfully stolen any funds. Based on the information available to the researcher, which of the following is the…
Admin asked 9 months ago • 
18 views0 answers0 votes
A government organization operates and maintains several ICS environments. The categorization of one of the ICS environments led to a moderate baseline. The organization has complied a set of applicable security controls based on this categorization. Given that this is a unique environment, which of the following should the organization do NEXT to determine if other security controls should be considered?
Admin asked 9 months ago • 
15 views0 answers0 votes
The director of sales asked the development team for some small changes to increase the usability of an application used by the sales team. Prior security reviews of the code showed no significant vulnerabilities, and since the changes were small, they were given a peer review and then pushed to the live environment. Subsequent vulnerability scans now show numerous flaws that were not present in the previous versions of the…
Admin asked 9 months ago • 
22 views0 answers0 votes
Following a merger, the number of remote sites for a company has doubled to 52. The company has decided to secure each remote site with an NGFW to provide web filtering, NIDS/NIPS, and network antivirus. The Chief Information Officer (CIO) has requested that the security engineer provide recommendations on sizing for the firewall with the requirements that it be easy to manage and provide capacity for growth. The tables below…
Admin asked 9 months ago • 
23 views0 answers0 votes
A security analyst is troubleshooting a scenario in which an operator should only be allowed to reboot remote hosts but not perform other activities. The analyst inspects the following portions of different configuration files: Configuration file 1: Operator ALL=/sbin/reboot – Configuration file 2: Command=`/sbin/shutdown now`, no-x11-forwarding, no-pty, ssh-dss Configuration file 3: Operator:x:1000:1000::/home/operator:/bin/bash Which of the following explains why an intended operator cannot perform the intended action?
Admin asked 9 months ago • 
20 views0 answers0 votes
Given the following output from a security tool in Kali:
Admin asked 9 months ago • 
26 views0 answers0 votes
The Chief Information Officer (CISO) is concerned that certain systems administrators will privileged access may be reading other users' emails. Review of a tool's output shows the administrators have used web mail to log into other users' inboxes. Which of the following tools would show this type of output?
Admin asked 9 months ago • 
19 views0 answers0 votes
A security administrator wants to implement two-factor authentication for network switches and routers. The solution should integrate with the company's RADIUS server, which is used for authentication to the network infrastructure devices. The security administrator implements the following: ✑ An HOTP service is installed on the RADIUS server. ✑ The RADIUS server is configured to require the HOTP service for authentication. The configuration is successfully tested using a software supplicant…
Admin asked 9 months ago • 
15 views0 answers0 votes
A systems administrator has installed a disk wiping utility on all computers across the organization and configured it to perform a seven-pass wipe and an additional pass to overwrite the disk with zeros. The company has also instituted a policy that requires users to erase files containing sensitive information when they are no longer needed. To ensure the process provides the intended results, an auditor reviews the following content from…
Admin asked 9 months ago • 
19 views0 answers0 votes
A medical facility wants to purchase mobile devices for doctors and nurses. To ensure accountability, each individual will be assigned a separate mobile device. Additionally, to protect patients' health information, management has identified the following requirements: ✑ Data must be encrypted at rest. ✑ The device must be disabled if it leaves the facility. ✑ The device must be disabled when tampered with. Which of the following technologies would BEST…
Admin asked 9 months ago • 
16 views0 answers0 votes
A newly hired security analyst has joined an established SOC team. Not long after going through corporate orientation, a new attack method on web-based applications was publicly revealed. The security analyst immediately brings this new information to the team lead, but the team lead is not concerned about it. Which of the following is the MOST likely reason for the team lead's position?
Admin asked 9 months ago • 
16 views0 answers0 votes
A database administrator is required to adhere to and implement privacy principles when executing daily tasks. A manager directs the administrator to reduce the number of unique instances of PII stored within an organization's systems to the greatest extent possible. Which of the following principles is being demonstrated?
Admin asked 9 months ago • 
21 views0 answers0 votes
The marketing department has developed a new marketing campaign involving significant social media outreach. The campaign includes allowing employees and customers to submit blog posts and pictures of their day-to-day experiences at the company. The information security manager has been asked to provide an informative letter to all participants regarding the security risks and how to avoid privacy and operational security issues. Which of the following is the MOST important…
Admin asked 9 months ago • 
19 views0 answers0 votes
At a meeting, the systems administrator states the security controls a company wishes to implement seem excessive, since all of the information on the company's web servers can be obtained publicly and is not proprietary in any way. The next day the company's website is defaced as part of an SQL injection attack, and the company receives press inquiries about the message the attackers displayed on the website. Which of…
Admin asked 9 months ago • 
14 views0 answers0 votes
A managed service provider is designing a log aggregation service for customers who no longer want to manage an internal SIEM infrastructure. The provider expects that customers will send all types of logs to them, and that log files could contain very sensitive entries. Customers have indicated they want on-premises and cloud-based infrastructure logs to be stored in this new service. An engineer, who is designing the new service, is…
Admin asked 9 months ago • 
16 views0 answers0 votes
A penetration tester noticed special characters in a database table. The penetration tester configured the browser to use an HTTP interceptor to verify that the front-end user registration web form accepts invalid input in the user's age field. The developer was notified and asked to fix the issue. Which of the following is the MOST secure solution for the developer to implement?
Admin asked 9 months ago • 
23 views0 answers0 votes
An internal staff member logs into an ERP platform and clicks on a record. The browser URL changes to: URL: http://192.168.0.100/ERP/accountId=5&action=SELECT Which of the following is the MOST likely vulnerability in this ERP platform?
Admin asked 9 months ago • 
26 views0 answers0 votes
An information security manager is concerned that connectivity used to configure and troubleshoot critical network devices could be attacked. The manager has tasked a network security engineer with meeting the following requirements: ✑ Encrypt all traffic between the network engineer and critical devices. ✑ Segregate the different networking planes as much as possible. ✑ Do not let access ports impact configuration tasks. Which of the following would be the BEST…
Admin asked 9 months ago • 
14 views0 answers0 votes
A company has gone through a round of phishing attacks. More than 200 users have had their workstation infected because they clicked on a link in an email. An incident analysis has determined an executable ran and compromised the administrator account on each workstation. Management is demanding the information security team prevent this from happening again. Which of the following would BEST prevent this from happening again?
Admin asked 9 months ago • 
17 views0 answers0 votes
« Previous1…56789…20Next »

Other exams

No Result
View All Result

Welcome Back!

Login to your account below

Forgotten Password? Sign Up

Create New Account!

Fill the forms below to register

All fields are required. Log In

Retrieve your password

Please enter your username or email address to reset your password.

Log In