CAS-005 Exam Dumps - CompTIA SecurityX Certification Exam

Searching for workable clues to ace the CompTIA CAS-005 Exam? You’re on the right place! ExamCert has realistic, trusted and authentic exam prep tools to help you achieve your desired credential. ExamCert’s CAS-005 PDF Study Guide, Testing Engine and Exam Dumps follow a reliable exam preparation strategy, providing you the most relevant and updated study material that is crafted in an easy to learn format of questions and answers. ExamCert’s study tools aim at simplifying all complex and confusing concepts of the exam and introduce you to the real exam scenario and practice it with the help of its testing engine and real exam dumps

Go to page:

<< First
Prev
1
2
3
4
5
6
7
8
9
10
Next
Last >>

Question # 33

A security analyst is using data provided from a recent penetration test to calculate CVSS scores to prioritize remediation. Which of the following metric groups would the analyst need to determine to get the overall scores? (Select three).

Temporal

Availability

Integrity

Confidentiality

Base

Environmental

Impact

Full Access

Question # 34

A company finds logs with modified time stamps when compared to other systems. The security team decides to improve logging and auditing for incident response. Which of the following should the team do to best accomplish this goal?

Integrate a file-monitoring tool with the SIEM.

Change the log solution and integrate it with the existing SIEM.

Implement a central logging server, allowing only log ingestion.

Rotate and back up logs every 24 hours, encrypting the backups.

Full Access

Question # 35

An organization plans to deploy new software. The project manager compiles a list of roles that will be involved in different phases of the deployment life cycle. Which of the following should the project manager use to track these roles?

CMDB

Recall tree

ITIL

RACI matrix

Full Access

Question # 36

Which of the following are the best ways to mitigate the threats that are the highest priority? (Select two).

Isolate network systems using Zero Trust architecture with microsegmentation and SD-WAN

Scan all systems and source code with access to sensitive data for vulnerabilities.

Implement a cloud access security broker and place it in blocking mode to prevent information exfiltration.

Apply data labeling to all sensitive information within the environment with special attention to payroll information.

Institute a technical approval process that requires multiple parties to sign off on mass payroll changes.

Full Access

Question # 37

A security officer performs due diligence activities before implementing a third-party solution into the enterprise environment. The security officer needs evidence from the third party that a data subject access request handling process is in place. Which of the following is the security officer most likely seeking to maintain compliance?

Information security standards

E-discovery requirements

Privacy regulations

Certification requirements

Reporting frameworks

Full Access

Question # 38

Emails that the marketing department is sending to customers are pomp to the customers' spam folders. The security team is investigating the issue and discovers that the certificates used by the email server were reissued, but DNS records had not been updated. Which of the following should the security team update in order to fix this issue? (Select three.)

DMARC

SPF

DKIM

DNSSEC

SASC

SAN

SOA

Full Access

Answer:

Explanation:

To prevent emails from being marked as spam, several DNS records related to email authentication need to be properly configured and updated when there are changes to the email server'scertificates:

A. DMARC (Domain-based Message Authentication, Reporting & Conformance): DMARC records help email servers determine how to handle messages that fail SPF or DKIM checks, improving email deliverability and reducing the likelihood of emails being marked as spam.

B. SPF (Sender Policy Framework): SPF records specify which mail servers are authorized to send email on behalf of your domain. Updating the SPF record ensures that the new email server is recognized as an authorized sender.

C. DKIM (DomainKeys Identified Mail): DKIM adds a digital signature to email headers, allowing the receiving server to verify that the email has not been tampered with and is from an authorized sender. Updating DKIM records ensures that emails are properly signed and authenticated.

D. DNSSEC (Domain Name System Security Extensions): DNSSEC adds security to DNS by enabling DNS responses to be verified. While important for DNS security, it does not directly address the issue of emails being marked as spam.

E. SASC: This is not a relevant standard for this scenario.

F. SAN (Subject Alternative Name): SAN is used in SSL/TLS certificates for securing multiple domain names, not for email delivery issues.

G. SOA (Start of Authority): SOA records are used for DNS zone administration and do not directly impact email deliverability.

H. MX (Mail Exchange): MX records specify the mail servers responsible for receiving email on behalf of a domain. While important, the primary issue here is the authentication of outgoing emails, which is handled by SPF, DKIM, and DMARC.

[References:, CompTIA Security+ Study Guide, RFC 7208 (SPF), RFC 6376 (DKIM), and RFC 7489 (DMARC), NIST SP 800-45, "Guidelines on Electronic Mail Security", , , , , , ]

Question # 39

Which of the following key management practices ensures that an encryption key is maintained within the organization?

Encrypting using a key stored in an on-premises hardware security module

Encrypting using server-side encryption capabilities provided by the cloud provider

Encrypting using encryption and key storage systems provided by the cloud provider

Encrypting using a key escrow process for storage of the encryption key

Full Access

Answer:

Explanation:

Step by Step Explanation:

Understanding the Scenario: The question is about ensuring that an organization retains control over its encryption keys. It focuses on different key storage and management methods.

Analyzing the Answer Choices:

A. Encrypting using a key stored in an on-premises hardware security module (HSM): This is thebest option for maintaining complete control over encryption keys. An HSM is a dedicated, tamper-resistant hardware device specifically designed for secure key storage and cryptographic operations. Storing keys on-premises within an HSM ensures the organization has exclusive access.

[Reference: HSMs are a core component of strong key management practices, often discussed in CASP+ material related to cryptography and data protection., B. Encrypting using server-side encryption capabilities provided by the cloud provider: With server-side encryption, the cloud provider typically manages the encryption keys. This means the organization is relinquishing some control over the keys., C. Encrypting using encryption and key storage systems provided by the cloud provider: Similar to option B, using cloud-provider-managed key storage systems means the organization doesn't have full, exclusive control over the keys., D. Encrypting using a key escrow process for storage of the encryption key: Key escrow involves entrusting a third party with a copy of the encryption key. This introduces a potential security risk, as the organization no longer has sole control over the key. Also, the key is not maintained within the organization., Reference: Key escrow is sometimes used for data recovery, but it's generally not recommended for maintaining the highest level of security and control over encryption keys. This is relevant to CASP+ discussions on risk assessment and key management best practices., Why A is the Correct Answer:, Control: On-premises HSMs provide the highest level of control over encryption keys. The organization has physical and logical control over the HSM and the keys stored within it., Security: HSMs are designed to be tamper-resistant and protect keys from unauthorized access, even if the surrounding systems are compromised., Compliance: In some industries, regulatory requirements may mandate that organizations maintain direct control over their encryption keys. On-premises HSMs can help meet these requirements., CASP+ Relevance: HSMs, key management, and data encryption are fundamental topics in CASP+. The exam emphasizes understanding the security implications of different key management approaches., Elaboration on Key Management Principles:, Key LifecycleManagement: Proper key management involves managing the entire lifecycle of a key, from generation and storage to rotation and destruction., Separation of Duties: It's generally a good practice to separate the roles of key management and data encryption to enhance security., Access Control: Strict access controls should be in place to limit who can access and use encryption keys., In conclusion, using an on-premises HSM for key storage is the best way to ensure that an organization maintains control over its encryption keys. It provides the highest level of security and control, aligning with best practices in cryptography and key management as emphasized in the CASP+ exam objectives., =================, , , , ]

Question # 40

A company wants to install a three-tier approach to separate the web. database, and application servers A security administrator must harden the environment which of the following is the best solution?

Deploying a VPN to prevent remote locations from accessing server VLANs

Configuring a SASb solution to restrict users to server communication

Implementing microsegmentation on the server VLANs

installing a firewall and making it the network core

Full Access