CompTIA CAS-004 CompTIA Advanced Security Practitioner (CASP+) Exam Online Training

Question #71

An e-commerce company is running a web server on premises, and the resource utilization is usually less than 30%. During the last two holiday seasons, the server experienced performance issues because of too many connections, and several customers were not able to finalize purchase orders. The company is looking to change the server configuration to avoid this kind of performance issue.

Which of the following is the MOST cost-effective solution?

A . Move the server to a cloud provider.
B . Change the operating system.
C . Buy a new server and create an active-active cluster.
D . Upgrade the server with a new one.

Reveal Solution Hide Solution

Question #72

A company has decided to purchase a license for software that is used to operate a mission-critical process. The third-party developer is new to the industry but is delivering what the company needs at this time.

Which of the following BEST describes the reason why utilizing a source code escrow will reduce the operational risk to the company if the third party stops supporting the application?

A . The company will have access to the latest version to continue development.
B . The company will be able to force the third-party developer to continue support.
C . The company will be able to manage the third-party developer’s development process.
D . The company will be paid by the third-party developer to hire a new development team.

Reveal Solution Hide Solution

Question #73

A security analyst is researching containerization concepts for an organization. The analyst is concerned about potential resource exhaustion scenarios on the Docker host due to a single application that is overconsuming available resources.

Which of the following core Linux concepts BEST reflects the ability to limit resource allocation to containers?

A . Union filesystem overlay
B . Cgroups
C . Linux namespaces
D . Device mapper

Reveal Solution Hide Solution

Question #74

A developer wants to maintain integrity to each module of a program and ensure the code cannot be altered by malicious users.

Which of the following would be BEST for the developer to perform? (Choose two.)

A . Utilize code signing by a trusted third party.
B . Implement certificate-based authentication.
C . Verify MD5 hashes.
D . Compress the program with a password.
E . Encrypt with 3DES.
F . Make the DACL read-only.

Reveal Solution Hide Solution

Correct Answer: A, F
A, F

Explanation:

Utilizing code signing by a trusted third party and making the DACL (discretionary access control list) read-only are actions that the developer can perform to maintain integrity to each module of a program and ensure the code cannot be altered by malicious users. Code signing is a technique that uses digital signatures to verify the authenticity and integrity of code, preventing unauthorized modifications or tampering. A trusted third party, such as a certificate authority, can issue and validate digital certificates for code signing. A DACL is an attribute of an object that defines the permissions granted or denied to users or groups for accessing or modifying the object. Making the DACL read-only can prevent unauthorized users or groups from changing the permissions or accessing the code. Implementing certificate-based authentication is not an action that the developer can perform to maintain integrity to each module of a program and ensure the code cannot be altered by malicious users, but a method for verifying the identity of users or devices based on digital certificates, preventing unauthorized access or impersonation. Verifying MD5 hashes is not an action that the developer can perform to maintain integrity to each module of a program and ensure the code cannot be altered by malicious users, but a method for checking the integrity of files based on cryptographic hash functions, detecting accidental or intentional changes or corruption. Compressing the program with a password is not an action that the developer can perform to maintain integrity to each module of a program and ensure the code cannot be altered by malicious users, but a method for reducing the size of files and protecting them with a password, preventing unauthorized access or extraction. Encrypting with 3DES is not an action that the developer can perform to maintain integrity to each module of a program and ensure the code cannot be altered by malicious users, but a method for protecting the confidentiality of data based on symmetric-key encryption algorithms, preventing unauthorized disclosure or interception.

Reference:

https://www.comptia.org/blog/what-is-code-signing

https://partners.comptia.org/docs/default-source/resources/casp-content-guide

Question #75

A company is moving most of its customer-facing production systems to the cloud-facing production systems to the cloud. IaaS is the service model being used. The Chief Executive Officer is concerned about the type of encryption available and requires the solution must have the highest level of security.

Which of the following encryption methods should the cloud security engineer select during the implementation phase?

A . Instance-based
B . Storage-based
C . Proxy-based
D . Array controller-based

Reveal Solution Hide Solution

Question #76

A vulnerability analyst identified a zero-day vulnerability in a company’s internally developed software. Since the current vulnerability management system does not have any checks for this vulnerability, an engineer has been asked to create one.

Which of the following would be BEST suited to meet these requirements?

A . ARF
B . ISACs
C . Node.js
D . OVAL

Reveal Solution Hide Solution

Question #77

An organization recently started processing, transmitting, and storing its customers’ credit card

information. Within a week of doing so, the organization suffered a massive breach that resulted in the exposure of the customers’ information.

Which of the following provides the BEST guidance for protecting such information while it is at rest and in transit?

A . NIST
B . GDPR
C . PCI DSS
D . ISO

Reveal Solution Hide Solution

Question #78

Which of the following is the MOST important security objective when applying cryptography to control messages that tell an ICS how much electrical power to output?

A . Importing the availability of messages
B . Ensuring non-repudiation of messages
C . Enforcing protocol conformance for messages
D . Assuring the integrity of messages

Reveal Solution Hide Solution

Question #79

A company wants to protect its intellectual property from theft. The company has already applied ACLs and DACs.

Which of the following should the company use to prevent data theft?

A . Watermarking
B . DRM
C . NDA
D . Access logging

Reveal Solution Hide Solution

Question #80

A satellite communications ISP frequently experiences outages and degraded modes of operation over one of its legacy satellite links due to the use of deprecated hardware and software. Three days per week, on average, a contracted company must follow a checklist of 16 different high-latency commands that must be run in serial to restore nominal performance. The ISP wants this process to be automated.

Which of the following techniques would be BEST suited for this requirement?

A . Deploy SOAR utilities and runbooks.
B . Replace the associated hardware.
C . Provide the contractors with direct access to satellite telemetry data.
D . Reduce link latency on the affected ground and satellite segments.

Reveal Solution Hide Solution