Free Access CompTIA.CAS-005.v2026-06-29.q284 Practice Test (Page 11)

Question 46

A security analyst isreviewing the following event timeline from an COR solution:

Which of the following most likely has occurred and needs to be fixed?

A.The Dl P has failed to block malicious exfiltration and data tagging is not being utilized property

B.An EDRbypass was utilized by a threat actor and updates must be installed by the administrator.

C.A logic law has introduced a TOCTOU vulnerability and must be addressed by the COR vendor

D.A potential insider threat is being investigated and will be addressed by the senior management team.

Question 47

A company implemented a new NAC solution based on 802.1X. However, the IT support team notices that some devices are not being enrolled in the new policies, causing access disruptions for key users. Which of the following solutions will most likely solve this issue and prevent reoccurrence?

A.Check whether the certificate is signed by a certification authority and manually deployed to each device.

B.Implement default credentials to automate RADIUS authentication and grant access to the network if the device owner is an employee.

C.Include the monitoring agent and digital certificate as part of the patching/updating program, keeping all the corporate devices updated and enrolled.

D.Check all the devices without proper access, enrolling them via the solution agent and authenticating to the network.

Question 48

The ISAC for the retail industry recently released a report regarding social engineering tactics in which small groups create distractions for employees while other malicious individuals install advanced card skimmers on the payment systems. The Chief Information Security Officer (CISO) thinks that security awareness training, technical control implementations, and governance already in place is adequate to protect from this threat. The board would like to test these controls. Which of the following should the CISO recommend?

A.Adversary emulation engagement

B.Dark web monitoring

C.Supply chain risk consultation

D.Tabletop exercises

Question 49

A security professional is investigating a trend in vulnerability findings for newly deployed cloud systems. Given the following output:

Which of the following actions would address the root cause of this issue?

A.Automating the patching system to update base Images

B.Recompiling the affected programs with the most current patches

C.Disabling unused/unneeded ports on all servers

D.Deploying a WAF with virtual patching upstream of the affected systems

Question 50

An IPSec solution is being deployed. The configuration files for both the VPN concentrator and the AAA server are shown in the diagram.
Complete the configuration files to meet the following requirements:
* The EAP method must use mutual certificate-based authentication (With issued client certificates).
* The IKEv2 Cipher suite must be configured to the MOST secure
authenticated mode of operation,
* The secret must contain at least one uppercase character, one lowercase character, one numeric character, and one special character, and it must meet a minimum length requirement of eight characters, INSTRUCTIONS Click on the AAA server and VPN concentrator to complete the configuration.
Fill in the appropriate fields and make selections from the drop-down menus.