CompTIA SecurityX Certification - CAS-005무료 덤프문제 풀어보기
A hospital's requirements for remote third-party monitoring of the HVAC system include the following:
- The vendor must be able to continuously monitor system health and
respond accordingly.
- The vendor must only have network access to the HVAC system.
- The vendor must be the only entity with access to the HVAC system.
Which of the following best meets the hospital's requirements?
- The vendor must be able to continuously monitor system health and
respond accordingly.
- The vendor must only have network access to the HVAC system.
- The vendor must be the only entity with access to the HVAC system.
Which of the following best meets the hospital's requirements?
정답: A
A hotel chain wants to use point-of-sale systems to allow customers to check in and out of their rooms without employee assistance. These systems should limit access to a specific set of programs approved to run, with all other programs blocked. Which of the following should the company configure to best support this goal?
정답: A
설명: (Fast2test 회원만 볼 수 있음)
A cybersecurity architect is reviewing the detection and monitoring capabilities for a global company that recently made multiple acquisitions. The architect discovers that the acquired companies use different vendors for detection and monitoring. The architect's goal is to:
- Create a collection of use cases to help detect known threats
- Include those use cases in a centralized library for use across all
of the companies
Which of the following is the best way to achieve this goal?
- Create a collection of use cases to help detect known threats
- Include those use cases in a centralized library for use across all
of the companies
Which of the following is the best way to achieve this goal?
정답: B
설명: (Fast2test 회원만 볼 수 있음)
An organization needs to classify its systems and data in accordance with external requirements.
Which of the following roles is best qualified to perform this task?
Which of the following roles is best qualified to perform this task?
정답: E
설명: (Fast2test 회원만 볼 수 있음)
Which of the following best describes a risk associated with using facial recognition to locally authenticate to a mobile device?
정답: C
설명: (Fast2test 회원만 볼 수 있음)
A company is decommissioning old servers and hard drives that contain sensitive data. Which of the following best protects against data leakage?
정답: C
설명: (Fast2test 회원만 볼 수 있음)
A security team is evaluating the following vulnerabilities in response to a third-party risk assessment:
Given the following organizational policy requirements:
- Any adjusted CVSS score of 7.0 or greater must be remediated within
15 days.
- Any adjusted CVSS score of 6.9 or less must be remediated within 30
days.
- Any vulnerability with a known public exploit must be remediated
within seven days.
- Any vulnerability that requires high privileges can have a lower
severity.
Which of the following actions should the analyst do to meet the requirements on time?
Given the following organizational policy requirements:
- Any adjusted CVSS score of 7.0 or greater must be remediated within
15 days.
- Any adjusted CVSS score of 6.9 or less must be remediated within 30
days.
- Any vulnerability with a known public exploit must be remediated
within seven days.
- Any vulnerability that requires high privileges can have a lower
severity.
Which of the following actions should the analyst do to meet the requirements on time?
정답: B
설명: (Fast2test 회원만 볼 수 있음)
A security architect must implement security controls in a software development life cycle for an internally developed application. The architect must identify the components that were used to create the application. Which of the following should the security architect use to meet this requirement?
정답: D
설명: (Fast2test 회원만 볼 수 있음)
A security engineer is implementing a code signing requirement for all code developed by the organization. Currently, the PKI only generates website certificates. Which of the following steps should the engineer perform first?
정답: C
설명: (Fast2test 회원만 볼 수 있음)
A government agency implements a configuration that disables cellular network access on government-issued devices while roaming internationally. The agency issues mobile hotspots and requires employees to use them for internet access. Which of the following best describes the agency's rationale?
정답: A
설명: (Fast2test 회원만 볼 수 있음)