Free Preparation Discussions
MENU
CompTIA CAS-004 Exam Questions
- Topic 1: Security Architecture: This topic focuses on designing secure network architectures based on specific scenarios and organizational requirements. It involves analyzing security objectives and integrating software applications securely into enterprise architectures.
- Topic 2: Security Operations: The topic emphasizes on day-to-day security operations and threat management. It includes performing threat management activities, analyzing indicators of compromise, and conducting vulnerability management tasks based on given scenarios.
- Topic 3: Security Engineering and Cryptography: It delves into implementing secure configurations for enterprise mobility, configuring endpoint security controls, and discussing security considerations for specific sectors and operational technologies.
- Topic 4: Governance, Risk, and Compliance: This topic centers around governance, risk management, and compliance. It covers applying risk strategies based on requirements, managing and mitigating vendor risks, and explaining compliance frameworks and legal considerations impacting organizational security.
Free CompTIA CAS-004 Exam Actual Questions
Note: Premium Questions for CAS-004 were last updated On Jul. 24, 2024 (see below)
Law enforcement officials informed an organization that an investigation has begun. Which of the following is the FIRST step the organization should take?
A legal hold is a process by which an organization instructs its employees or other relevant parties to preserve specific data for potential litigation. A legal hold is triggered when litigation is reasonably anticipated, such as when law enforcement officials inform an organization that an investigation has begun. The first step the organization should take is to initiate a legal hold to ensure that relevant evidence is not deleted, destroyed, or altered. A legal hold also demonstrates the organization's good faith and compliance with its duty to preserve evidence. Verified Reference:
https://percipient.co/litigation-hold-triggers-and-the-duty-to-preserve-evidence/
A security engineer needs to implement a cost-effective authentication scheme for a new web-based application that requires:
* Rapid authentication
* Flexible authorization
* Ease of deployment
* Low cost but high functionality
Which of the following approaches best meets these objectives?
OAuth, which stands for Open Authorization, is a standard for authorization that enables secure token-based access. It allows users to grant a web application access to their information on another web application without giving them the credentials for their account. OAuth is particularly useful for rapid authentication, flexible authorization, ease of deployment, and offers high functionality at a low cost, making it an ideal choice for new web-based applications. This approach is well-suited for situations where web applications need to interact with each other on behalf of the user, without sharing user's password, such as integrating a geolocation application with Facebook. OAuth uses tokens issued by an authorization server, providing restricted access to a user's data, which aligns with the objectives of rapid authentication, flexible authorization, ease of deployment, and cost-effectiveness.
Law enforcement officials informed an organization that an investigation has begun. Which of the following is the FIRST step the organization should take?
A legal hold is a process by which an organization instructs its employees or other relevant parties to preserve specific data for potential litigation. A legal hold is triggered when litigation is reasonably anticipated, such as when law enforcement officials inform an organization that an investigation has begun. The first step the organization should take is to initiate a legal hold to ensure that relevant evidence is not deleted, destroyed, or altered. A legal hold also demonstrates the organization's good faith and compliance with its duty to preserve evidence. Verified Reference:
https://percipient.co/litigation-hold-triggers-and-the-duty-to-preserve-evidence/
https://www.everlaw.com/blog/ediscovery-best-practices/guide-to-legal-holds/
A security engineer is assessing a legacy server and needs to determine if FTP is running and on which port The service cannot be turned off, as it would impact a critical application's ability to function. Which of the following commands would provide the information necessary to create a firewall rule to prevent that service from being exploited?
The netstat -tulpn command is used to display network connections, routing tables, interface statistics, masquerade connections, and multicast memberships. The -tulpn options specifically show TCP and UDP connections with the process ID and the name that is listening on each port, which would provide the necessary information to identify if FTP is running and on which port without turning the service off. This information can then be used to create a precise firewall rule to prevent the FTP service from being exploited.
A forensics investigator is analyzing an executable file extracted from storage media that was submitted (or evidence The investigator must use a tool that can identify whether the executable has indicators, which may point to the creator of the file Which of the following should the investigator use while preserving evidence integrity?
ssdeep is a tool that computes and matches Context Triggered Piecewise Hashing (CTPH), also known as fuzzy hashing. It can be used to identify similar files or slight variations of the same file, which may point to the creator of the file if certain patterns or markers are consistently present. This method allows for integrity checking without altering the evidence, which is critical in forensic investigation.
- Select Question Types you want
- Set your Desired Pass Percentage
- Allocate Time (Hours : Minutes)
- Create Multiple Practice tests with Limited Questions
- Customer Support
Mike
22 days agoJody
24 days agoOdelia
25 days ago