Online Access Free CAS-005 Practice Test

A security team is responding to malicious activity and needs to determine the scope of impact.
The malicious activity appears to affect a certain version of an application used by the organization. Which of the following actions best enables the team to determine the scope of impact?

• A.Analyzing user behavior
• B.Reviewing the asset inventory
• C.Inspecting egress network traffic
• D.Performing a port scan

An architect is securing an external infrastructure to support external services. The following components are in use:
- One Kubernetes cluster with multiple pods and nodes for back-end
services
- Two VM Linux instances as the web tier
- One SQL-based database
The company only has funding for two controls and must prioritize resilience. Which of the following are the most effective controls for the company to implement to meet this goal? (Choose two.)

• A.An IAM policies enforced
• B.A RASP to the workload services
• C.An IPS at the web tier
• D.A database firewall on the SQL instance
• E.An application load balancer
• F.A content delivery network

Emails that the marketing department is sending to customers are going to the customers' spam folders. The security team is investigating the issue and discovers that the certificates used by the email server were reissued, but DNS records had not been updated. Which of the following should the security team update in order to fix this issue? (Choose three.)

• A.SASC
• B.MX
• C.DKIM
• D.SAN
• E.DMARC
• F.SPF
• G.DNSSEC
• H.SOA

A security architect wants to ensure a remote host's identity and decides that pinning the X.509 certificate to the device is the most effective solution. Which of the following must happen first?

• A.Compare the retrieved certificate with the embedded certificate.
• B.Use Distinguished Encoding Rules (DER) for the certificate.
• C.Extract the private key from the certificate.
• D.Use an out-of-band method to obtain the certificate.

A regulated company is in the process of refreshing its entire infrastructure. The company has a business-critical process running on an old 2008 Windows server. If this server fails, the company would lose millions of dollars in revenue. Which of the following actions should the company take?

• A.Implement network compensating controls.
• B.Accept the risk as the cost of doing business.
• C.Create an organizational risk register for project prioritization.
• D.Purchase insurance to offset the cost if a failure occurred.