How Many Questions Of CAS-004 Pdf

NEW QUESTION 1
An organization is implementing a new identity and access management architecture with the following objectives: Supporting MFA against on-premises infrastructure
Improving the user experience by integrating with SaaS applications
Applying risk-based policies based on location Performing just-in-time provisioning Which of the following authentication protocols should the organization implement to support these requirements?

• A. Kerberos and TACACS
• B. SAML and RADIUS
• C. OAuth and OpenID
• D. OTP and 802.1X

Answer: A

Explanation:
Reference: https://docs.microsoft.com/en-us/azure/active-directory/manage-apps/migrate-application-authentication-toazure-active-directory

NEW QUESTION 2
A shipping company that is trying to eliminate entire classes of threats is developing an SELinux policy to ensure its custom Android devices are used exclusively for package tracking.
After compiling and implementing the policy, in which of the following modes must the company ensure the devices are configured to run?

• A. Protecting
• B. Permissive
• C. Enforcing
• D. Mandatory

Answer: B

Explanation:
Reference: https://source.android.com/security/selinux/customize

NEW QUESTION 3
A security analyst is reviewing network connectivity on a Linux workstation and examining the active TCP connections using the command line. Which of the following commands would be the BEST to run to view only active Internet connections?

• A. sudo netstat -antu | grep “LISTEN” | awk ‘{print$5}’
• B. sudo netstat -nlt -p | grep “ESTABLISHED”
• C. sudo netstat -plntu | grep -v “Foreign Address”
• D. sudo netstat -pnut -w | column -t -s $’\w’
• E. sudo netstat -pnut | grep -P ^tcp

Answer: B

Explanation:
Reference: https://www.codegrepper.com/code-examples/shell/netstat+find+port

NEW QUESTION 4
An organization recently started processing, transmitting, and storing its customers’ credit card information. Within a week of doing so, the organization suffered a massive breach that resulted in the exposure of the customers’ information.
Which of the following provides the BEST guidance for protecting such information while it is at rest and in transit?

• A. NIST
• B. GDPR
• C. PCI DSS
• D. ISO

Answer: C

Explanation:
Reference: https://en.wikipedia.org/wiki/Payment_Card_Industry_Data_Security_Standard

NEW QUESTION 5
A security engineer needs to recommend a solution that will meet the following requirements: Identify sensitive data in the provider’s network
Maintain compliance with company and regulatory guidelines
Detect and respond to insider threats, privileged user threats, and compromised accounts Enforce datacentric security, such as encryption, tokenization, and access control Which of the following solutions should the security engineer recommend to address these requirements?

• A. WAF
• B. CASB
• C. SWG
• D. DLP

Answer: A

NEW QUESTION 6
A security analyst is researching containerization concepts for an organization. The analyst is concerned about potential resource exhaustion scenarios on the Docker host due to a single application that is overconsuming available resources.
Which of the following core Linux concepts BEST reflects the ability to limit resource allocation to containers?

• A. Union filesystem overlay
• B. Cgroups
• C. Linux namespaces
• D. Device mapper

Answer: B

Explanation:
Reference: https://www.ibm.com/support/pages/deep-dive-yarn-cgroups-hadoop-dev

NEW QUESTION 7
A company is moving most of its customer-facing production systems to the cloud-facing production systems to the cloud.
IaaS is the service model being used. The Chief Executive Officer is concerned about the type of encryption available and requires the solution must have the highest level of security.
Which of the following encryption methods should the cloud security engineer select during the implementation phase?

• A. Instance-based
• B. Storage-based
• C. Proxy-based
• D. Array controller-based

Answer: A

NEW QUESTION 8
An organization is designing a network architecture that must meet the following requirements: Users will only be able to access predefined services.
Each user will have a unique allow list defined for access.
The system will construct one-to-one subject/object access paths dynamically.
Which of the following architectural designs should the organization use to meet these requirements?

• A. Peer-to-peer secure communications enabled by mobile applications
• B. Proxied application data connections enabled by API gateways
• C. Microsegmentation enabled by software-defined networking
• D. VLANs enabled by network infrastructure devices

Answer: C

NEW QUESTION 9
A company created an external application for its customers. A security researcher now reports that the application has a serious LDAP injection vulnerability that could be leveraged to bypass authentication and authorization.
Which of the following actions would BEST resolve the issue? (Choose two.)

• A. Conduct input sanitization.
• B. Deploy a SIEM.
• C. Use containers.
• D. Patch the OS
• E. Deploy a WAF.
• F. Deploy a reverse proxy
• G. Deploy an IDS.

Answer: BD

NEW QUESTION 10
A security analyst discovered that the company’s WAF was not properly configured. The main web server was breached, and the following payload was found in one of the malicious requests:

Which of the following would BEST mitigate this vulnerability?

• A. CAPTCHA
• B. Input validation
• C. Data encoding
• D. Network intrusion prevention

Answer: B

Explanation:
Reference: https://hdivsecurity.com/owasp-xml-external-entities-xxe

NEW QUESTION 11
A company is preparing to deploy a global service.
Which of the following must the company do to ensure GDPR compliance? (Choose two.)

• A. Inform users regarding what data is stored.
• B. Provide opt-in/out for marketing messages.
• C. Provide data deletion capabilities.
• D. Provide optional data encryption.
• E. Grant data access to third parties.
• F. Provide alternative authentication techniques.

Answer: AB

Explanation:
Reference: https://gdpr.eu/compliance-checklist-us-companies/

NEW QUESTION 12
In preparation for the holiday season, a company redesigned the system that manages retail sales and moved it to a cloud service provider. The new infrastructure did not meet the company’s availability requirements. During a postmortem analysis, the following issues were highlighted:
* 1. International users reported latency when images on the web page were initially loading.
* 2. During times of report processing, users reported issues with inventory when attempting to place orders.
* 3. Despite the fact that ten new API servers were added, the load across servers was heavy at peak times.
Which of the following infrastructure design changes would be BEST for the organization to implement to avoid these issues in the future?

• A. Serve static content via distributed CDNs, create a read replica of the central database and pull reports from there, and auto-scale API servers based on performance.
• B. Increase the bandwidth for the server that delivers images, use a CDN, change the database to a non-relational database, and split the ten API servers across two load balancers.
• C. Serve images from an object storage bucket with infrequent read times, replicate the database across different regions, and dynamically create API servers based on load.
• D. Serve static-content object storage across different regions, increase the instance size on the managed relational database, and distribute the ten API servers across multiple regions.

Answer: A

NEW QUESTION 13
A company’s SOC has received threat intelligence about an active campaign utilizing a specific vulnerability. The company would like to determine whether it is vulnerable to this active campaign.
Which of the following should the company use to make this determination?

• A. Threat hunting
• B. A system penetration test
• C. Log analysis within the SIEM tool
• D. The Cyber Kill Chain

Answer: B

NEW QUESTION 14
An application developer is including third-party background security fixes in an application. The fixes seem to resolve a currently identified security issue. However, when the application is released to the public, report come In that a previously vulnerability has returned .
Which of the following should the developer integrate into the process to BEST prevent this type of behavior?

• A. Peer review
• B. Regression testing
• C. User acceptance
• D. Dynamic analysis

Answer: A

NEW QUESTION 15
A business stores personal client data of individuals residing in the EU in order to process requests for mortgage loan approvals. Which of the following does the business’s IT manager need to consider?

• A. The availability of personal data
• B. The right to personal data erasure
• C. The company’s annual revenue
• D. The language of the web application

Answer: B

Explanation:
Reference: https://gdpr.eu/right-to-beforgotten/#:~:text=Also%20known%20as%20the%20right,to%20delete%20their%20personal%20data.&text=The%20General%20Data%20Protection%20Regulation,collected%2C%20processed%2C%20and%20erased

NEW QUESTION 16
A developer implement the following code snippet.

Which of the following vulnerabilities does the code snippet resolve?

• A. SQL inject
• B. Buffer overflow
• C. Missing session limit
• D. Information leakage

Answer: D

NEW QUESTION 17
Due to locality and budget constraints, an organization’s satellite office has a lower bandwidth allocation than other offices in the organization. As a result, the local security infrastructure staff is assessing architectural options that will help preserve network bandwidth and increase speed to both internal and external resources while not sacrificing threat visibility.
Which of the following would be the BEST option to implement?

• A. Distributed connection allocation
• B. Local caching
• C. Content delivery network
• D. SD-WAN vertical heterogeneity

Answer: C

NEW QUESTION 18
......