CompTIA CAS-003 Exam Dumps

An organization is currently performing a market scan for managed security services and EDR capability. Which of the following business documents should be released to the prospective vendors in the first step of the process? (Select TWO). 

During a security event investigation, a junior analyst fails to create an image of a server’s hard drive before removing the drive and sending it to the forensics analyst. Later, the evidence from the analysis is not usable in the prosecution of the attackers due to the uncertainty of tampering. Which of the following should the junior analyst have followed? 

Which of the following BEST represents a risk associated with merging two enterprisesduring an acquisition?

An organization is evaluating options related to moving organizational assets to a cloudbased environment using an IaaS provider. One engineer has suggested connecting a second cloud environment within the organization’s existing facilities to capitalize on available datacenter space and resources. Other project team members are concerned about such a commitment of organizational assets, and ask the Chief Security Officer (CSO) for input. The CSO explains that the project team should work with the engineer to evaluate the risks associated with using the datacenter to implement: 

Which of the following describes a contract that is used to define the various levels of maintenance to be provided by an external business vendor in secure environment? 

A security analyst works for a defense contractor that produces classified research on drones. The contractor faces nearly constant attacks from sophisticated nation-state actors and other APIs. Which of the following would help protect the confidentiality of the research data? 

A security engineer is investigating a compromise that occurred between two internal computers. The engineer has determined during the investigation that one computer infected another. While reviewing the IDS logs, the engineer can view the outbound callback traffic, but sees no traffic between the two computers. Which of the following would BEST address the IDS visibility gap? 

The legal department has required that all traffic to and from a company’s cloud-based word processing and email system is logged. To meet this requirement, the Chief Information Security Officer (CISO) has implemented a next-generation firewall to perform inspection of the secure traffic and has decided to use a cloud-based log aggregation solution for all traffic that is logged. Which of the following presents a long-term risk to user privacy in this scenario? 

A company has decided to lower costs by conducting an internal assessment on specific devices and various internal and external subnets. The assessment will be done during regular office hours, but it must not affect any production servers. Which of the following would MOST likely be used to complete the assessment? (Select two.) 

A company contracts a security engineer to perform a penetration test of its client-facingweb portal. Which of the following activities would be MOST appropriate?

A company uses an application in its warehouse that works with several commercially available tablets and can only be accessed inside the warehouse. The support department would like the selection of tablets to be limited to three models to provide better support and ensure spares are on hand. Users often keep the tablets after they leave the department, as many of them store personal media items. Which of the following should the security engineer recommend to meet these requirements? 

Due to a recent breach, the Chief Executive Officer (CEO) has requested the followingactivities be conducted during incident response planning:Involve business owners and stakeholdersCreate an applicable scenarioConduct a biannual verbal review of the incident response planReport on the lessons learned and gaps identifiedWhich of the following exercises has the CEO requested?

When implementing a penetration testing program, the Chief Information Security Officer(CISO) designates different organizational groups within the organization as havingdifferent responsibilities, attack vectors, and rules of engagement. First, the CISOdesignates a team to operate from within the corporate environment. This team iscommonly referred to as:

A forensic analyst suspects that a buffer overflow exists in a kernel module. The analystexecutes the following command:dd if=/dev/ram of=/tmp/mem/dmpThe analyst then reviews the associated output:^34^#AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/bin/bash^21^03#45However, the analyst is unable to find any evidence of the running shell. Which of thefollowing of the MOST likely reason the analyst cannot find a process ID for the shell?

A newly hired security analyst has joined an established SOC team. Not long after goingthrough corporate orientation, a new attack method on web-based applications was publiclyrevealed. The security analyst immediately brings this new information to the team lead,but the team lead is not concerned about it.Which of the following is the MOST likely reason for the team lead’s position?

A systems administrator at a medical imaging company discovers protected health information (PHI) on a general purpose file server. Which of the following steps should the administrator take NEXT? 

A security consultant was hired to audit a company’s password are account policy. Thecompany implements the following controls:Minimum password length: 16Maximum password age: 0Minimum password age: 0Password complexity: disabledStore passwords in plain text: disabledFailed attempts lockout: 3Lockout timeout: 1 hourThe password database uses salted hashes and PBKDF2. Which of the following is MOSTlikely to yield the greatest number of plain text passwords in the shortest amount of time?

An online bank has contracted with a consultant to perform a security assessment of thebank’s web portal. The consultant notices the login page is linked from the main page withHTTPS, but when the URL is changed to HTTP, the browser is automatically redirectedback to the HTTPS site. Which of the following is a concern for the consultant, and how canit be mitigated?

Which of the following is an external pressure that causes companies to hire security assessors and penetration testers? 

At a meeting, the systems administrator states the security controls a company wishes to implement seem excessive, since all of the information on the company’s web servers can be obtained publicly and is not proprietary in any way. The next day the company’s website is defaced as part of an SQL injection attack, and the company receives press inquiries about the message the attackers displayed on the website. Which of the following is the FIRST action the company should take? 

Security policies that are in place at an organization prohibit USB drives from being utilized across the entire enterprise, with adequate technical controls in place to block them. As a way to still be able to work from various locations on different computing resources, several sales staff members have signed up for a web-based storage solution without the consent of the IT department. However, the operations department is required to use the same service to transmit certain business partner documents.Which of the following would BEST allow the IT department to monitor and control this behavior? 

One of the objectives of a bank is to instill a security awareness culture. Which of the following are techniques that could help to achieve this? (Choose two.) 

A security engineer is attempting to increase the randomness of numbers used in key generation in a system. The goal of the effort is to strengthen the keys against predictive analysis attacks. Which of the following is the BEST solution? 

While conducting a BIA for a proposed acquisition, the IT integration team found that bothcompanies outsource CRM services to competing and incompatible third-party cloudservices. The decision has been made to bring the CRM service in-house, and the IT teamhas chosen a future solution. With which of the following should the Chief InformationSecurity Officer (CISO) be MOST concerned? (Choose two.)

A security consultant is performing a penetration test on www.comptia.org and wants todiscover the DNS administrator’s email address to use in a later social engineering attack.The information listed with the DNS registrar is private. Which of the following commandswill also disclose the email address?