CompTIA Advanced Security Practitioner (CASP) - CAS-003 FREE EXAM DUMPS QUESTIONS & ANSWERS]

Question 1

During an audit, it was determined from a sample that four out of 20 former employees were still accessing their email accounts An information security analyst is reviewing the access to determine if the audit was valid Which of the following would assist with the validation and provide the necessary documentation to audit?

A. Reviewing the email global account list and the collaboration platform for recent activity B. Sending a test email to the former employees to document an undeliverable email and review the ERP access C. Examining the termination notification process from human resources and employee account access logs D. Checking social media platforms for disclosure of company sensitive and proprietary information

Discussion 0

Correct Answer: C Vote an answer

Question 2

An extensive third-party audit reveals a number of weaknesses m a company's endpoint security posture. The most significant issues are as follows:

Which of the following endpoint security solutions mitigate the GREATEST amount of risk?

A. Integrated patch management capabilities an integrated desktop firewall intrusion prevention capabilities and signature-based anti-malware capabilities B. Machine-learning-based advanced malware prevention capabilities. an integrated desktop firewall, user behavioral analytics capabilities and file-integrity monitoring capabilities C. Comprehensive data leakage prevention capabilities machine-learning-based advanced malware prevention capabilities extensive EDR capabilities, and removable media management capabilities D. Removable media management capabilities signature-based anti-malware capabilities we-integrity monitoring capabilities, and extensive EDR capabilities

Discussion 0

Correct Answer: C Vote an answer

Question 3

A system owner has requested support from data owners to evaluate options for the disposal of equipment containing sensitive dat a. Regulatory requirements state the data must be rendered unrecoverable via logical means or physically destroyed. Which of the following factors is the regulation intended to address?

A. Sovereignty B. Remanence C. E-waste D. Deduplication

Discussion 0

Correct Answer: C Vote an answer

Question 4

A manufacturing company employs SCADA systems to drive assembly lines across geographically dispersed sites. Therefore, the company must use the Internet to transport control messages and responses. Which of the following architectural changes when integrated will BEST reduce the manufacturing control system's attack surface? (Select TWO)

A. Add sensors and collectors at the Internet boundary. B. Isolate control systems from enterprise systems. C. Implement a site-to-site VPN across sites D. Implement supply chain security. E. Integrate message authentication F. Design a patch management capability for control systems.

Discussion 0

Correct Answer: B,F Vote an answer

Question 5

A security consultant is attempting to discover if the company is utilizing databases on client machines to store the customer dat a. The consultant reviews the following information:

Which of the following commands would have provided this output?

A. sqlmap -w B. ifconfig -arp C. arp -s D. netstat -a

Discussion 0

Correct Answer: D Vote an answer

Question 6

A cybersecurity engineer analyst a system for vulnerabilities. The tool created an OVAL. Results document as output. Which of the following would enable the engineer to interpret the results in a human readable form? (Select TWO.)

A. XML style sheet B. Debugging utility C. Text editor D. SCAP tool E. Event Viewer F. OOXML editor

Discussion 0

Correct Answer: C,D Vote an answer

Question 7

A Chief Information Officer (CIO) publicly announces the implementation of a new financial system. As part of a security assessment that includes a social engineering task, which of the following tasks should be conducted to demonstrate the BEST means to gain information to use for a report on social vulnerability details about the financial system?

A. Compromise the email server to obtain a list of attendees who responded to the invitation who is on the IT staff B. Understand the CIO is a social drinker, and find the means to befriend the CIO at establishments the CIO frequents C. Notify the CIO that, through observation at events, malicious actors can identify individuals to befriend D. Call the CIO and ask for an interview, posing as a job seeker interested in an open position

Discussion 0

Correct Answer: B Vote an answer

Question 8

Two major aircraft manufacturers are in the process of merging their assets and forming a single enterprise network. One of the manufacturers maintains its ICS systems on the same network segment as its enterprise IT assets, whereas the other manufacturer has physically isolated its factory-floor ICS systems from the rest of its enterprise. Which of the following BEST describes an architectural weakness associated with merging the two companies' assets in their current state?

A. The IT systems across the two organizations run different security architectures. B. The ICS components are unsupported and vulnerable, and they cannot be patched. C. The employed network segmentation does not use cryptographic isolation. D. Some factory-floor systems are incompatible with legacy protocols

Discussion 0

Correct Answer: B Vote an answer