Page: 1
/
105
Total 524 questions
Unlock Your Cybersecurity Potential: Master CompTIA CASP+ CAS-004 Now
Question 1
During a vendor assessment, an analyst reviews a listing of the complementary user entity controls included in the audit report. Which of the following is the most important aspect to consider when reviewing this list with the security team?
Correct : A
Step by Step
User entity controls are responsibilities that must be implemented by the organization, so determining how to implement and monitor them is critical.
Monitoring the CSP or auditing their implementation pertains to the CSP's responsibilities, not complementary user entity controls.
Start a Discussions
Submit Your Answer:
Question 2
A company recently deployed new servers to create an additional cluster to support a new application. The corporate security policy states that all new servers must be resilient. The new cluster has a high-availability configuration for a smooth failover. The failover was successful following a recent power outage, but both clusters lost critical data, which impacted recovery time. Which of the following needs to be configured to help ensure minimal delays when power outages occur in the future?
Correct : A
Step by Step
Replication ensures data consistency by synchronizing copies of data across clusters. This would prevent data loss during power outages.
Caching provides faster data retrieval but does not ensure data persistence.
Containerization improves deployment consistency but does not address resilience or data integrity.
Redundancy relates to additional hardware or systems but does not guarantee up-to-date data.
High availability addresses system uptime but does not prevent data loss.
Start a Discussions
Submit Your Answer:
Question 3
A security manager is creating a standard configuration across all endpoints that handle sensitive dat
a. Which of the following techniques should be included in the standard configuration to ensure the endpoints are hardened?
Correct : A
Step by Step
Drive encryption protects sensitive data at rest by ensuring unauthorized access cannot expose the data if the physical endpoint is compromised.
Patch management is a necessary security control but does not specifically address endpoint hardening for sensitive data.
Event logging aids in monitoring and incident detection but does not directly harden endpoints.
Resource monitoring manages system performance and availability but is unrelated to data security.
Start a Discussions
Submit Your Answer:
Question 4
A security engineer needs to ensure production containers are automatically scanned for vulnerabilities before they are accepted into the production environment. Which of the following should the engineer use to automatically incorporate vulnerability scanning on every commit?
Correct : B
Step by Step
CI/CD pipeline (Continuous Integration/Continuous Deployment) automates the testing, including vulnerability scanning, for every code commit before deploying to production.
Code repository stores the code but does not handle scanning.
Integrated development environment (IDE) aids developers in writing and testing code but does not enforce automated scanning.
Container orchestrator manages container deployment but does not directly address pre-production scanning.
Start a Discussions
Submit Your Answer:
Question 5
A SIEM generated an alert after a third-party database administrator, who had recently been granted temporary access to the repository, accessed business-sensitive content in the database. The SIEM had generated similar alerts before this incident. Which of the following best explains the cause of the alert?
Correct : C
Step by Step
Database activity monitoring (DAM) tracks user actions within databases and generates alerts for anomalous behavior, such as unauthorized access to sensitive content.
Database field tokenization protects sensitive data but does not monitor access.
Database decoy involves creating fake data to detect misuse but is unrelated to monitoring.
Database integrity enforcement ensures data accuracy but does not generate access alerts.
Start a Discussions
Submit Your Answer:
Unlock Full
CAS-004 Exam Features
In Just $49 You can Access
All Official Question Types- Interactive Web-Based Practice Test Software
- No Installation or 3rd Party Software Required
- Customize your practice sessions (Free Demo)
- 24/7 Customer Support