Online Access Free CAS-005 Practice Test

An organization has deployed a cloud-based application that provides virtual event services globally to clients. During a typical event, thousands of users access various entry pages within a short period of time. The entry pages include sponsor-related content that is relatively static and is pulled from a database. When the first major event occurs, users report poor response time on the entry pages. Which of the following features is the most appropriate for the company to implement?

• A.Containerization
• B.Horizontal scalability
• C.Caching
• D.Static code analysis
• E.Vertical scalability

A SIEM generated an alert after a third-party database administrator, who had recently been granted temporary access to the repository, accessed business-sensitive content in the database.
The SIEM had generated similar alerts before this incident. Which of the following best explains the cause of the alert?

• A.Database decoy
• B.Database activity monitoring
• C.Database field tokenization
• D.Database integrity enforcement

A company with a large, cloud-native, e-commerce website wants to know more details about an ongoing, sophisticated attack against the web platform. Which of the following is the best technique?

• A.High-interaction honeypots
• B.Dark web monitoring
• C.Structured Threat Information exchange
• D.User behavior analytics

Company A is merging with Company B. Company A is a small, local company. Company B has a large, global presence. The two companies have a lot of duplication in their IT systems, processes, and procedures. On the new Chief Information Officer's (CIO's) first day, a fire breaks out at Company B's main data center. Which of the following actions should the CIO take first?

• A.Determine whether the incident response plan has been tested at both companies, and use it to respond.
• B.Review the incident response plans, and engage the disaster recovery plan while relying on the IT leaders from both companies.
• C.Initiate Company A's IT systems processes and procedures, assess the damage, and perform a BIA.
• D.Ensure hot, warm, and mobile disaster recovery sites are available, and give an update to the companies' leadership teams.

Two companies that recently merged would like to unify application access between the companies, without initially merging internal authentication stores. Which of the following technical strategies would best meet this objective?

• A.RADIUS
• B.Federation
• C.MFA
• D.TACACS+
• E.ABAC