CompTIA CompTIA Certifications CAS-004 Questions & Answers

• Question 551:

  A security compliance requirement states that specific environments that handle sensitive data must be protected by need-to-know restrictions and can only connect to authorized endpoints. The requirement also states that a DLP solution

  within the environment must be used to control the data from leaving the environment.

  Which of the following should be implemented for privileged users so they can support the environment from their workstations while remaining compliant?

  A. NAC to control authorized endpoints

  B. FIM on the servers storing the data

  C. A jump box in the screened subnet

  D. A general VPN solution to the primary network

  Correct Answer: C

• Question 552:

  An attack team performed a penetration test on a new smart card system. The team demonstrated that by subjecting the smart card to high temperatures, the secret key could be revealed. Which of the following side-channel attacks did the team use?

  A. Differential power analysis

  B. Differential fault analysis

  C. Differential temperature analysis

  D. Differential timing analysis

  Correct Answer: B

  "Differential fault analysis (DFA) is a type of active side-channel attack in the field of cryptography, specifically cryptanalysis. The principle is to induce faults--unexpected environmental conditions--into cryptographic operations, to reveal their internal states."

  Reference: https://www.hitachi-hightech.com/global/products/science/tech/ana/thermal/descriptions/dta.html

• Question 553:

  A security consultant needs to set up wireless security for a small office that does not have Active Directory. Despite the lack of central account management, the office manager wants to ensure a high level of defense to prevent brute-force attacks against wireless authentication.

  Which of the following technologies would BEST meet this need?

  A. Faraday cage

  B. WPA2 PSK

  C. WPA3 SAE

  D. WEP 128 bit

  Correct Answer: C

  WPA3 SAE prevents brute-force attacks.

  Reference: https://support.enplug.com/hc/en-us/articles/205160175-Setting-your-WiFi-encryption-as-WPA2-PSK

• Question 554:

  An organization that provides a SaaS solution recently experienced an incident involving customer data loss. The system has a level of self-healing that includes monitoring performance and available resources. When the system detects an issue, the self-healing process is supposed to restart parts of the software.

  During the incident, when the self-healing system attempted to restart the services, available disk space on the data drive to restart all the services was inadequate. The self-healing system did not detect that some services did not fully restart and declared the system as fully operational.

  Which of the following BEST describes the reason why the silent failure occurred?

  A. The system logs rotated prematurely.

  B. The disk utilization alarms are higher than what the service restarts require.

  C. The number of nodes in the self-healing cluster was healthy.

  D. Conditional checks prior to the service restart succeeded.

  Correct Answer: D

• Question 555:

  A software company is developing an application in which data must be encrypted with a cipher that requires the following:

  1.

  Initialization vector

  2.

  Low latency

  3.

  Suitable for streaming

  Which of the following ciphers should the company use?

  A. Cipher feedback

  B. Cipher block chaining message authentication code

  C. Cipher block chaining

  D. Electronic codebook

  Correct Answer: C

  Reference: https://www.sciencedirect.com/topics/computer-science/symmetric-cipher

• Question 556:

  A security consultant needs to protect a network of electrical relays that are used for monitoring and controlling the energy used in a manufacturing facility. Which of the following systems should the consultant review before making a recommendation?

  A. CAN

  B. ASIC

  C. FPGA

  D. SCADA

  Correct Answer: D

  Reference: https://www.sciencedirect.com/topics/computer-science/protective-relay

• Question 557:

  A security analyst discovered that the company's WAF was not properly configured. The main web server was breached, and the following payload was found in one of the malicious requests:

  (and(objectClass=*)(objectClass=*))(and(objectClass=void)(type=admin))

  Which of the following would BEST mitigate this vulnerability?

  A. Network intrusion prevention

  B. Data encoding

  C. Input validation

  D. CAPTCHA

  Correct Answer: C

  Reference: https://book.hacktricks.xyz/pentesting-web/ldap-injection

• Question 558:

  A networking team was asked to provide secure remote access to all company employees. The team decided to use client-to-site VPN as a solution. During a discussion, the Chief Information Security Officer raised a security concern and asked the networking team to route the Internet traffic of remote users through the main office infrastructure. Doing this would prevent remote users from accessing the Internet through their local networks while connected to the VPN.

  Which of the following solutions does this describe?

  A. Full tunneling

  B. Asymmetric routing

  C. SSH tunneling

  D. Split tunneling

  Correct Answer: A

• Question 559:

  An organization is prioritizing efforts to remediate or mitigate risks identified during the latest assessment. For one of the risks, a full remediation was not possible, but the organization was able to successfully apply mitigations to reduce the likelihood of impact.

  Which of the following should the organization perform NEXT?

  A. Assess the residual risk.

  B. Update the organization's threat model.

  C. Move to the next risk in the register.

  D. Recalculate the magnitude of impact.

  Correct Answer: A

• Question 560:

  Company A acquired Company . During an audit, a security engineer found Company B's environment was inadequately patched. In response, Company A placed a firewall between the two environments until Company B's infrastructure could be integrated into Company A's security program.

  Which of the following risk-handling techniques was used?

  A. Accept

  B. Avoid

  C. Transfer

  D. Mitigate

  Correct Answer: D

  Reference: https://www.pivotpointsecurity.com/blog/risk-tolerance-in-business/