[2026] CompTIA Advanced Security Practitioner - CAS-001 무료 시험 문제

문제1

A financial institution wants to reduce the costs associated with managing and troubleshooting employees' desktops and applications, while keeping employees from copying data onto external storage. The Chief Information Officer (CIO) has asked the security team to evaluate four solutions submitted by the change management group. Which of the following BEST accomplishes this task?

A. Implement desktop virtualization and encrypt all sensitive data at rest and in transit.

B. Move the critical applications to a private cloud and disable VPN and tunneling.

C. Implement VDI and disable hardware and storage mapping from the thin client.

D. Implement server virtualization and move the application from the desktop to the server.

정답: C

문제2

A security engineer is troubleshooting a possible virus infection, which may have spread to multiple desktop computers within the organization. The company implements enterprise antivirus software on all desktops, but the enterprise antivirus server's logs show no sign of a virus infection. The border firewall logs show suspicious activity from multiple internal hosts trying to connect to the same external IP address. The security administrator decides to post the firewall logs to a security mailing list and receives confirmation from other security administrators that the firewall logs indicate internal hosts are compromised with a new variant of the Trojan.Ransomcrypt.G malware not yet detected by most antivirus software. Which of the following would have detected the malware infection sooner?

A. The security administrator should consider installing a cloud augmented security service.

B. The security administrator should consider deploying a signature-based intrusion detection system.

C. The security administrator should consider deploying enterprise forensic analysis tools.

D. The security administrator should consider establishing an incident response team.

정답: A

문제3

Due to cost and implementation time pressures, a security architect has allowed a NAS to be used instead of a SAN for a non-critical, low volume database. Which of the following would make a NAS unsuitable for a business critical, high volume database application that required a high degree of data confidentiality and data availability? (Select THREE).

A. Zoning and LUN security

B. Latency

C. Broadcast storms

D. Multipath

E. Block level transfer of data

F. File level encryption

G. File level transfer of data

정답: B,C,G

문제4

A business wants to start using social media to promote the corporation and to ensure that customers have a good experience with their products. Which of the following security items should the company have in place before implementation? (Select TWO).

A. The company should ensure that the company has sufficient bandwidth to allow for social media traffic.

B. The company must dedicate specific staff to act as social media representatives of the company.

C. The security policy needs to be reviewed to ensure that social media policy is properly implemented.

D. Senior staff blogs should be ghost written by marketing professionals.

E. All staff needs to be instructed in the proper use of social media in the work environment.

F. The finance department must provide a cost benefit analysis for social media.

정답: B,C

문제5

A company has a legacy virtual cluster which was added to the datacenter after a small company was acquired. All VMs on the cluster use the same virtual network interface to connect to the corporate data center LAN. Some of the virtual machines on the cluster process customer data, some process company financial data, and others act as externally facing web servers. Which of the following security risks can result from the configuration in this scenario?

A. Visibility on the traffic between the virtual machines can impact confidentiality

B. Shared virtual switches can negatively impact the integrity of network packets

C. NIC utilization can exceed 50 percent and impact availability

D. Additional overhead from network bridging can affect availability

정답: A

문제6

An asset manager is struggling with the best way to reduce the time required to perform asset location activities in a large warehouse. A project manager indicated that RFID might be a valid solution if the asset manager's requirements were supported by current RFID capabilities. Which of the following requirements would be MOST difficult for the asset manager to implement?

A. The ability to assign RFID tags a unique identifier

B. The ability to integrate environmental sensors into the RFID tag

C. The ability to track assets in real time as they move throughout the facility

D. The ability to encrypt RFID data in transmission

정답: D

문제7

In a SPML exchange, which of the following BEST describes the three primary roles?

A. The Request Authority (RA) entity makes the provisioning request, the Provisioning Service Provider (PSP) responds to the RA requests, and the Provisioning Service Target (PST) performs the provisioning.

B. The Provisioning Service Provider (PSP) entity makes the provisioning request, the Provisioning Service Target (PST) responds to the PSP requests, and the Provisioning Service Provider (PSP) performs the provisioning.

C. The Request Authority (RA) entity makes the provisioning request, the Provisioning Service Target (PST) responds to the RA requests, and the Provisioning Service Provider (PSP) performs the provisioning.

D. The Provisioning Service Target (PST) entity makes the provisioning request, the Provisioning Service Provider (PSP) responds to the PST requests, and the Provisioning Service Target (PST) performs the provisioning.

정답: A

문제8

A firm's Chief Executive Officer (CEO) is concerned that its IT staff lacks the knowledge to identify complex vulnerabilities that may exist in the payment system being internally developed. The payment system being developed will be sold to a number of organizations and is in direct competition with another leading product. The CEO highlighted, in a risk managementmeeting that code base confidentiality is of upmost importance to allow the company to exceed the competition in terms of product reliability, stability and performance. The CEO also highlighted that company reputation for secure products is extremely important. Which of the following will provide the MOST thorough testing and satisfy the CEO's requirements?

A. Sign a NDA with a large consulting firm and use the firm to perform Black box testing.

B. Use the security assurance team and development team to perform Black box testing.

C. Sign a NDA with a small consulting firm and use the firm to perform Grey box testing.

D. Use the security assurance team and development team to perform Grey box testing.

정답: C

문제9

A security administrator wants to perform an audit of the company password file to ensure users are not using personal information such as addresses and birthdays as part of their password. The company employs 200,000 users, has virtualized environments with cluster and cloud-based computing resources, and enforces a minimum password length of 14 characters. Which of the following options is BEST suited to run the password auditing software and produce a report in the SHORTEST amount of time?

A. The system administrator should take advantage of the company's cluster based computing resources, upload the password file to the cluster, and run the password cracker on that platform.

B. The system administrator should upload the password file to a virtualized de-duplicated storage system to reduce the password entries and run a password cracker on that file.

C. The system administrator should upload the password file to cloud storage and use on-demand provisioning to build a purpose based virtual machine to run a password cracker on all the users.

D. The system administrator should build a virtual machine on the administrator's desktop, transfer the password file to it, and run the a password cracker on the virtual machine.

정답: A

문제10

CORRECT TEXT
Company A has noticed abnormal behavior targeting their SQL server on the network from a rogue IP address. The company uses the following internal IP address ranges: 192.10.1.0/24 for the corporate site and 192.10.2.0/24 for the remote site. The Telco router interface uses the 192.10.5.0/30 IP range.
Instructions: Click on the simulation button to refer to the Network Diagram for Company A.
Click on Router 1, Router 2, and the Firewall to evaluate and configure each device.
Task 1: Display and examine the logs and status of Router 1, Router 2, and Firewall interfaces.
Task 2: Reconfigure the appropriate devices to prevent the attacks from continuing to target the SQL server and other servers on the corporate network.

정답:

Change the permit statement on the third and 4th line line of the access list (192.168.3.0/24) so that it is denied to192.168.1.0/24and192.168.2.0/24.

문제11

Company GHI consolidated their network distribution so twelve network VLANs would be available over dual fiber links to a modular L2 switch in each of the company's six IDFs. The IDF modular switches have redundant switch fabrics and power supplies. Which of the following threats will have the GREATEST impact on the network and what is the appropriate remediation step?

A. Threat: VLAN hopping Remediation: Enable ACLs on the IDF switch

B. Threat: VLAN hopping Remediation: Enable only necessary VLANs for each port

C. Threat: Bridge loop Remediation: Enable spanning tree

D. Threat: 802.1q trunking attack Remediation: Enable only necessary VLANs for each port

정답: C

문제12

The Chief Executive Officer (CEO) of a corporation purchased the latest mobile device and wants to connect it to the company's internal network. The Chief Information Security Officer (CISO) was told to research and recommend how to secure this device.
Which of the following recommendations should be implemented to keep the device from posing a security risk to the company?

A. A password or PIN to access the device and a corporate policy to prevent sensitive information from residing on a mobile device.

B. A corporate policy to prevent sensitive information from residing on a mobile device and anti-virus software.

C. Encryption of the non-volatile memory and a corporate policy to prevent sensitive information from residing on a mobile device.

D. Encryption of the non-volatile memory and a password or PIN to access the device.

정답: D

CompTIA Advanced Security Practitioner - CAS-001무료 덤프문제 풀어보기

우리와 연락하기

유용한 링크

최신 업데이트