最新のCAS-001問題集で試験を準備する

CompTIA CAS-001 試験概要:

CompTIA CAS-001 試験シラバストピック:

CompTIA Advanced Security Practitioner 認定 CAS-001 試験問題：

問題 #1

Company XYZ has employed a consultant to perform a controls assessment of the HR system, backend business operations, and the SCADA system used in the factory. Which of the following correctly states the risk management options that the consultant should use during the assessment?

A. Calculate risk by determining technical likelihood and potential business impact.
B. Risk reduction, risk sharing, risk retention, and risk acceptance.
C. Avoid, transfer, mitigate, and accept.
D. Risk likelihood, asset value, and threat level.

問題 #2

A user on a virtual machine downloads a large file using a popular peer-to-peer torrent program. The user is unable to execute the program on their VM. A security administrator scans the VM and detects a virus in the program. The administrator reviews the hypervisor logs and correlates several access attempts to the time of execution of the virus. Which of the following is the MOST likely explanation for this behavior?

A. The virus is trying to access a virtual device which the hypervisor is configured to restrict.
B. The virtual machine is configured to require administrator rights to execute all programs.
C. The hypervisor host does not have hardware acceleration enabled and does not allow DEP.
D. The virus scanner on the VM changes file extensions of all programs downloaded via P2P to prevent execution.

問題 #3

Company ABC has grown yearly through mergers and acquisitions. This has led to over 200 internal custom web applications having standalone identity stores. In order to reduce costs and improve operational efficiencies a project has been initiated to implement a centralized security infrastructure.
The requirements are as follows:
------
Reduce costs
Improve efficiencies and time to market
Manageable
Accurate identity information
Standardize on authentication and authorization
Ensure a reusable model with standard integration patterns
Which of the following security solution options will BEST meet the above requirements? (Select THREE).

A. Implement a web access control agent based model with a centralized directory model providing coarse grained access control and single sign-on capabilities.
B. Build an organization-wide fine grained access control model stored in a centralized policy data store.
C. Implement self service provisioning of identity information, coarse grained, and fine grained access control.
D. Implement a web access control forward proxy and centralized directory model, providing coarse grained access control, and single sign-on capabilities.
E. Move each of the applications individual fine grained access control models into a centralized directory with fine grained access control.
F. Implement a web access controlled reverse proxy and centralized directory model providing coarse grained access control and single sign-on capabilities.
G. Implement automated provisioning of identity information; coarse grained, and fine grained access control.

問題 #4

A security administrator needs to deploy a remote access solution for both staff and contractors. Management favors remote desktop due to ease of use. The current risk assessment suggests protecting Windows as much as possible from direct ingress traffic exposure. Which of the following solutions should be selected?

A. Change remote desktop to a non-standard port, and implement password complexity for the entire active directory domain.
B. Distribute new IPSec VPN client software to applicable parties. Virtualize remote desktop services functionality.
C. Deploy a remote desktop server on your internal LAN, and require an active directory integrated SSL connection for access.
D. Place the remote desktop server(s) on a screened subnet, and implement two-factor authentication.

問題 #5

A Chief Information Security Officer (CISO) is approached by a business unit manager who heard a report on the radio this morning about an employee at a competing firm who shipped a VPN token overseas so a fake employee could log into the corporate VPN. The CISO asks what can be done to mitigate the risk of such an incident occurring within the organization. Which of the following is the MOST cost effective way to mitigate such a risk?

A. Require hardware tokens to be replaced on a yearly basis.
B. Use PKI certificates as part of the VPN authentication process.
C. Implement a biometric factor into the token response process.
D. Force passwords to be changed every 90 days.

解説：