Free Access CompTIA.CAS-003.v2022-08-15.q472 Practice Test (Page 16)

Question 71

The Chief Information Security Officer (CISO) is asking for ways to protect against zero-day exploits. The CISO is concerned that an unrecognized threat could compromise corporate data and result in regulatory fines as well as poor corporate publicity. The network is mostly flat, with split staff/guest wireless functionality. Which of the following equipment MUST be deployed to guard against unknown threats?

A.Cloud-based antivirus solution, running as local admin, with push technology for definition updates.

B.Implementation of an offsite data center hosting all company data, as well as deployment of VDI for all client computing needs.

C.Host based heuristic IPS, segregated on a management VLAN, with direct control of the perimeter firewall ACLs.

D.Behavior based IPS with a communication link to a cloud based vulnerability and threat feed.

Question 72

A new internal network segmentation solution will be implemented into the enterprise that consists of 200 internal firewalls. As part of running a pilot exercise, it was determined that it takes three changes to deploy a new application onto the network before it is operational. Security now has a significant effect on overall availability. Which of the following would be the FIRST process to perform as a result of these findings?

A.Lower the SLA to a more tolerable level and perform a risk assessment to see if the solution could be met by another solution. Reuse the firewall infrastructure on other projects.

B.Perform a cost benefit analysis and implement the solution as it stands as long as the risks are understood by the business owners around the availability issues. Decrease the current SLA expectations to match the new solution.

C.Engage internal auditors to perform a review of the project to determine why and how the project did not meet the security requirements. As part of the review ask them to review the control effectiveness.

D.Review to determine if control effectiveness is in line with the complexity of the solution. Determine if the requirements can be met with a simpler solution.

Question 73

A company is trying to resolve the following issues related to its web servers and Internet presence:
* The company's security rating declined on multiple occasions when it failed to renew a TLS certificate on one or more infrequently used web servers
* The company is running out of public IPs assigned by its ISP
* The company is implementing a WAF. and the WAF vendor charges by back-end hosts to which the WAF routes Which of the following solutions will help the company mitigate these issues'? (Select TWO).

A.Use an automated CA service API for certificate renewal

B.Implement self-signed certificates and disable trust verification.

C.Use a DMZ architecture

D.Work with the company's ISP to configure BGP

E.Deploy IPv6 for external-facing servers

F.Implement reverse proxy servers

Question 74

A Chief information Security Officer (CISO) has launched to create a rebuts BCP/DR plan for the entire company. As part of the initiative , the security team must gather data supporting s operational importance for the applications used by the business and determine the order in which the application must be back online. Which of the following be the FIRST step taken by the team?

A.Perform a review of all policies an procedures related to BGP a and DR and created an educated educational module that can be assigned to at employees to provide training on BCP/DR events.

B.Have each business unit conduct a BIA and categories the application according to the cumulative data gathered.

C.Create an SLA for each application that states when the application will come back online and distribute this information to the business units.

D.Implement replication of all servers and application data to back up detacenters that are geographically from the central datacenter and release an upload BPA to all clients.

Question 75

There have been some failures of the company's internal facing website. A security engineer has found the WAF to be the root cause of the failures. System logs show that the WAF has been unavailable for 14 hours over the past month, in four separate situations.
One of these situations was a two hour scheduled maintenance time, aimed at improving the stability of the WAF. Using the MTTR based on the last month's performance figures, which of the following calculations is the percentage of uptime assuming there were 722 hours in the month?

A.92.24 percent

B.98.06 percent

C.98.34 percent

D.99.72 percent

Other Version: 7475CompTIA.CAS-003.v2022-09-22.q535; 4312CompTIA.CAS-003.v2022-05-05.q206; 2985CompTIA.CAS-003.v2022-04-30.q141; 84CompTIA.Actualtestpdf.CAS-003.v2022-01-19.by.morgan.327q.pdf

Latest Upload: 105OCEG.GRCP.v2025-09-11.q211; 104HP.HPE0-V27.v2025-09-11.q78; 118Oracle.1Z0-1057-23.v2025-09-10.q47; 151Google.Professional-Cloud-Network-Engineer.v2025-09-09.q179; 131SAP.C-S4EWM-2023.v2025-09-08.q83; 165TheSecOpsGroup.CNSP.v2025-09-08.q20; 223CFAInstitute.ESG-Investing.v2025-09-08.q173; 173PECB.ISO-IEC-27001-Lead-Implementer.v2025-09-06.q132; 151Salesforce.Data-Architect.v2025-09-05.q216; 146Adobe.AD0-E605.v2025-09-05.q50

Question 71

Question 72

Question 73

Question 74

Question 75

Download PDF File