Online Access Free CAS-001 Practice Test

The security administrator at a bank is receiving numerous reports that customers are unable to login to the bank website. Upon further investigation, the security administrator discovers that the name associated with the bank website points to an unauthorized IP address.
Which of the following solutions will MOST likely mitigate this type of attack?

• A.Security awareness and user training
• B.Configuring and deploying TSIG
• C.Recursive DNS from the root servers
• D.Firewalls and IDS technologies

A University uses a card transaction system that allows students to purchase goods using their student ID. Students can put money on their ID at terminals throughout the campus. The security administrator was notified that computer science students have been using the network to illegally put money on their cards. The administrator would like to attempt to reproduce what the students are doing. Which of the following is the BEST course of action?

• A.Notify the transaction system vendor of the security vulnerability that was discovered.
• B.Use a protocol analyzer to reverse engineer the transaction system's protocol.
• C.Contact the computer science students and threaten disciplinary action if they continue their actions.
• D.Install a NIDS in front of all the transaction system terminals.

A Chief Information Security Officer (CISO) of a major consulting firm has significantly increased the company's security posture; however, the company is still plagued by data breaches of misplaced assets. These data breaches as a result have led to the compromise of sensitive corporate and client data on at least 25 occasions. Each employee in the company is provided a laptop to perform company business. Which of the following actions can the CISO take to mitigate the breaches?

• A.Implement an open source system which allows data to be encrypted while processed.
• B.Implement full disk encryption on all storage devices the firm owns.
• C.Reload all user laptops with full disk encryption software immediately.
• D.Implement new continuous monitoring procedures.

Company XYZ has purchased and is now deploying a new HTML5 application. The company wants to hire a penetration tester to evaluate the security of the client and server components of the proprietary web application before launch. Which of the following is the penetration tester MOST likely to use while performing black box testing of the security of the company's purchased application? (Select TWO).

• A.Local proxy
• B.Fuzzer
• C.Sandbox
• D.Code review
• E.Web vulnerability scanner

About twice a year a switch fails in a company's network center. Under the maintenance contract, the switch would be replaced in two hours losing the business $1,000 per hour.
The cost of a spare switch is $3,000 with a 12-hour delivery time and would eliminate downtime costs if purchased ahead of time. The maintenance contract is $1,500 per year.
Which of the following is true in this scenario?

• A.It is more cost-effective to eliminate the maintenance contract and purchase a replacement upon failure.
• B.It is more cost-effective to purchase a spare switch prior to an outage and keep the maintenance contract.
• C.It is more cost-effective to keep the maintenance contract instead of purchasing a spare switch prior to an outage.
• D.It is more cost-effective to purchase a spare switch prior to an outage and eliminate the maintenance contract.