CompTIA CompTIA Certifications CAS-004 Questions & Answers

• Question 681:

  DRAG DROP

  Drag and drop the cloud deployment model to the associated use-case scenario. Options may be used only once or not at all.

  Select and Place:

  

  Correct Answer:

  

• Question 682:

  DRAG DROP

  A security administrator must configure the database server shown below the comply with the four requirements listed. Drag and drop the appropriate ACL that should be configured on the database server to its corresponding requirement. Answer options may be used once or not at all.

  

  Select and Place:

  

  Correct Answer:

  

• Question 683:

  DRAG DROP

  A vulnerability scan with the latest definitions was performed across Sites A and B.

  INSTRUCTIONS

  Match each relevant finding to the affected host.

  After associating the finding with the appropriate host(s), click the host to select the appropriate corrective action for that finding.

  Each finding may be used more than once.

  If at any time you would like to bring back the initial state of the simulation, please click the Reset All button. Select and Place:

  

  Correct Answer:

  

• Question 684:

  

  DRAG DROP

  An organization is planning for disaster recovery and continuity of operations.

  INSTRUCTIONS

  Review the following scenarios and instructions. Match each relevant finding to the affected host.

  After associating scenario 3 with the appropriate host(s), click the host to select the appropriate corrective action for that finding.

  Each finding may be used more than once.

  If at any time you would like to bring back the initial state of the simulation, please click the Reset All button.

  Select and Place:

  

  Correct Answer:

  

• Question 685:

  

  Company A has noticed abnormal behavior targeting their SQL server on the network from a rogue IP address. The company uses the following internal IP address ranges: 192.10.1.0/24 for the corporate site and 192.10.2.0/24 for the remote

  site. The Telco router interface uses the 192.10.5.0/30 IP range.

  Instructions: Click on the simulation button to refer to the Network Diagram for Company A.

  Click on Router 1, Router 2, and the Firewall to evaluate and configure each device.

  Task 1: Display and examine the logs and status of Router 1, Router 2, and Firewall interfaces.

  Task 2: Reconfigure the appropriate devices to prevent the attacks from continuing to target the SQL server and other servers on the corporate network.

  

  

  Hot Area:

  

  Correct Answer:

  

  We have traffic coming from two rogue IP addresses: 192.10.3.204 and 192.10.3.254 (both in the 192.10.30.0/24 subnet) going to IPs in the corporate site subnet (192.10.1.0/24) and the remote site subnet (192.10.2.0/24). We need to Deny (block) this traffic at the firewall by ticking the following two checkboxes:

  

• Question 686:

  HOTSPOT

  A product development team has submitted code snippets for review prior to release.

  INSTRUCTIONS

  Analyze the code snippets, and then select one vulnerability, and one fix for each code snippet.

  If at any time you would like to bring back the initial state of the simulation, please click the Reset All button.

  Code Snippet 1

  

  Code Snippet 2

  

  Hot Area:

  

  Correct Answer:

  

  1:

  The potential vulnerability here is not about SQL injection but about the direct use of a user-provided userid without verifying whether the user is authorized to view or interact with the specified user ID, which leads to Insecure Direct Object

  References (IDOR).

  2:

  There is no evidence in the provided code of credentials being passed or an "authenticated" value being present or checked. The vulnerability here is not related to credential handling but to the execution of potentially unsafe commands.