Online Access Free CAS-004 Practice Test

Users from the marketing department (192.168.0.1/24) are reporting performance issues with an on-premises application server (192.168.0.9). The application server should only be accessed internally. A security analyst reviews various logs and finds the following information:

Which of the following should the security analyst perform next to improve performance and ensure the application server is secured as required?

• A.Update the DLP system to include policies for data exfiltration attempts on the application server.
• B.Configure NGFW to deny access from subnets not in 192.168.0.0/24.
• C.Modify the cloud security group rules to deny all external traffic to 192.168.0.9.
• D.Update the IDS/IPS software with the latest OS/firmware to ensure all brute-force attacks are prevented.

A small bank is evaluating different methods to address and resolve the following requirements
" Must be able to store credit card data using the smallest amount of data possible
* Must be compliant with PCI DSS
* Must maintain confidentiality if one piece of the layer is compromised Which of the following is the best solution for the bank?

• A.Homomorphic encryption
• B.Masking
• C.Scrubbing
• D.Tokenization

A software development company is implementing a SaaS-based password vault for customers to use. The requirements for the password vault include:
Vault encryption using a variable block and key size
Resistance to brute-force attacks
Which of the following should be implemented to meet these requirements? (Select two.)

• A.PBKDF2
• B.P256
• C.AES
• D.ECDSA
• E.RIPEMD
• F.RC5

A security auditor needs to review the manner in which an entertainment device operates. The auditor is analyzing the output of a port scanning tool to determine the next steps in the security review. Given the following log output.
The best option for the auditor to use NEXT is:

• A.A SCAP assessment.
• B.Fuzzing
• C.Network interception.
• D.Reverse engineering

A company processes data subject to NDAs with partners that define the processing and storage constraints for the covered data. The agreements currently do not permit moving the covered data to the cloud, and the company would like to renegotiate the terms of the agreements.
Which of the following would MOST likely help the company gain consensus to move the data to the cloud?

• A.Emulating OS and hardware architectures to blur operations from CSP view
• B.Designing data protection schemes to mitigate the risk of loss due to multitenancy
• C.Purchasing managed FIM services to alert on detected modifications to covered data
• D.Implementing redundant stores and services across diverse CSPs for high availability