SecurityX CAS-005 Practice Questions & Answers • ExamPrepare

136 questions in this view

Page 1 of 23

Question 1

A security operations analyst is reviewing network traffic baselines for nightly database backups. Given the following information:

Which of the following should the security analyst do next?

Consult with a network engineer to determine the impact of bandwidth usage.
Quarantine PRDDB01 and then alert the database engineers.
Refer to the incident response playbook for the proper response.
Review all the network logs for further data exfiltration.

Select an answer above, then submit your vote. Reading or practicing does not cast a vote.

Question 2

After some employees are caught uploading data to online personal storage accounts, a company becomes concerned about data leaks related to sensitive, internal documentation. Which of the following would the company most likely do to decrease this type of risk?

Improve firewall rules to block source IP addresses.
Implement a cloud access security broker.
Create SIEM rules to raise alerts for access to those platforms.
Deploy a FIM solution to trigger when files are accessed.

Select an answer above, then submit your vote. Reading or practicing does not cast a vote.

Question 3

A security architect is designing Zero Trust enforcement policies for all end users. The majority of users work remotely and travel frequently for work. Which of the following controls should the security architect do first?

Switch user MFA from software-based tokens to hardware time-based OTPs.
Implement TLS decryption and inspect inbound and outbound network traffic.
Enforce daily posture compliance checks against the endpoint security controls.
Deploy context-aware reauthentication with UBA baseline deviations.

Select an answer above, then submit your vote. Reading or practicing does not cast a vote.

Question 4

A company experienced a data breach, resulting in the disclosure of extremely sensitive data regarding a merger. As a regulated entity, the company must comply with reporting and disclosure requirements. The company is concerned about its public image and shareholder values. Which of the following best supports the organization in addressing its concerns?

Data subject access request
Business impact analysis
Supply chain management program
Crisis management plan

Select an answer above, then submit your vote. Reading or practicing does not cast a vote.

Question 5

An organization recently performed a penetration test on its new human resources talent management and payroll application. Given the following:

Which of the following actions should the penetration tester recommend?

Deploy a host intrusion detection system.
Keep the application up to date with the latest patches.
Implement the principle of least privilege.
Reduce the number of users assigned to each group.

Select an answer above, then submit your vote. Reading or practicing does not cast a vote.

Question 6

A building camera is remotely accessed and disabled from the remote console application during off-hours. A security analyst reviews the following logs:

11 Dec 16:03:43 192.168.2.45 access granted to admin from 192.168.2.5 443 GET /cameras/loading_dock.htm 200 Mozilla/5.0 (Windows NT 5.1) Gecko

11 Dec 16:33:43 192.168.2.45 access granted to admin from 192.168.2.5 443 GET /cameras/loading_dock.htm 200 Mozilla/5.0(Windows NT 5.1) Gecko

11 Dec 22:30:23 192.168.2.45 access granted to admin from 104.18.16.29 80 GET /cameras/loading_dock.htm 200 Mozilla/5.0 (X11.Linux x86_64) Applewebkit

11 Dec 23:00:23 192.168.2.45 logoff admin from 104.18.16.29 80 GET /cameras/loading_dock.htm 200 Mozilla/5.0 (X11.Linux x86_64) Applewebkit

11 Dec 23:05:43 192.168.2.45 access granted to admin from 104.18.16.29 80 GET /cameras/loading_dock.htm 200 Mozilla/5.0 (X11.Linux x86_64) Applewebkit

11 Dec 23:35:43 192.168.2.45 logoff admin from 104.18.16.29 80 GET /cameras/loading_dock.htm 200 Mozilla/5.0 (X11.Linux x86_64) Applewebkit

12 Dec 00:30:53 192.168.2.45 access granted to admin from 104.18.16.29 80 GET /cameras/loading_dock.htm 200 Mozilla/5.0 (X11.Linux x86_64) Applewebkit

Which of the following actions should the analyst take to best mitigate the threat?

Implement WAF protection for the web application.
Upgrade the firmware on the camera.
Only allow connections from approved IPs.
Block IP 104.18.16.29 on the firewall.

Select an answer above, then submit your vote. Reading or practicing does not cast a vote.