Free Access CompTIA.CAS-004.v2023-08-04.q126 Practice Test (Page 2)

Question 1

A company's employees are not permitted to access company systems while traveling internationally. The company email system is configured to block logins based on geographic location, but some employees report their mobile phones continue to sync email traveling . Which of the following is the MOST likely explanation?
(Select TWO.)

A.Disabled GPS on mobile devices

B.Unrestricted email administrator accounts

C.Chief use of UDP protocols

D.VPN on the mobile device

E.Privilege escalation attack

F.Outdated escalation attack

Question 2

An energy company is required to report the average pressure of natural gas used over the past quarter. A PLC sends data to a historian server that creates the required reports.
Which of the following historian server locations will allow the business to get the required reports in an OT and IT environment?

A.In the IT environment, allow PLCs to send data from the OT environment to the IT environment.

B.Use a screened subnet between the OT and IT environments.

C.In the OT environment, use a VPN from the IT environment into the OT environment.

D.In the OT environment, allow IT traffic into the OT environment.

Question 3

Which of the following is required for an organization to meet the ISO 27018 standard?

A.All network traffic must be inspected.

B.All Pll must be encrypted.

C.GDPR equivalent standards must be met

D.COBIT equivalent standards must be met

Question 4

A security analyst discovered that a database administrator's workstation was compromised by malware. After examining the Jogs. the compromised workstation was observed connecting to multiple databases through ODBC. The following query behavior was captured:

Assuming this query was used to acquire and exfiltrate data, which of the following types of data was compromised, and what steps should the incident response plan contain?
A) Personal health information: Inform the human resources department of the breach and review the DLP logs.
B) Account history; Inform the relationship managers of the breach and create new accounts for the affected users.
C) Customer IDs: Inform the customer service department of the breach and work to change the account numbers.
D) PAN: Inform the legal department of the breach and look for this data in dark web monitoring.

A.Option D

B.Option A

C.Option C

D.Option B

Question 5

A security engineer has been asked to close all non-secure connections from the corporate network. The engineer is attempting to understand why the corporate UTM will not allow users to download email via IMAPS. The engineer formulates a theory and begins testing by creating the firewall ID 58, and users are able to download emails correctly by using IMAP instead. The network comprises three VLANs: