最新のCAS-001問題集で試験を準備する

CompTIA CAS-001 試験概要:

CompTIA CAS-001 試験シラバストピック:

CompTIA Advanced Security Practitioner 認定 CAS-001 試験問題：

問題 #1

A security consultant is called into a small advertising business to recommend which security policies and procedures would be most helpful to the business. The business is comprised of 20 employees, operating off of two shared servers. One server houses employee data and the other houses client data. All machines are on the same local network. Often these employees must work remotely from client sites, but do not access either of the servers remotely. Assuming no security policies or procedures are in place right now, which of the following would be the MOST applicable for implementation? (Select TWO).

A. Data Classification Policy
B. Password Policy
C. VPN Policy
D. Wireless Access Procedure
E. Database Administrative Procedure

問題 #2

-----
An administrator is unable to connect to a server via VNC.
Upon investigating the host firewall configuration, the administrator sees the following lines:
A INPUT -m state --state NEW -m tcp -p tcp --dport 3389 -j DENY A INPUT -m state --state NEW -m tcp -p tcp --dport 22 -j DENY A INPUT -m state --state NEW -m tcp -p tcp --dport 10000 -j ACCEPT A INPUT -m state --state NEW -m tcp -p tcp --dport 80 -j DENY A INPUT -m state --state NEW -m tcp -p tcp --sport 3389 -j ACCEPT
Which of the following should occur to allow VNC access to the server?

A. Fix the typo in one line.
B. A line needs to be added.
C. A line needs to be removed.
D. DENY needs to be changed to ACCEPT on one line.

問題 #3

An asset manager is struggling with the best way to reduce the time required to perform asset location activities in a large warehouse. A project manager indicated that RFID might be a valid solution if the asset manager's requirements were supported by current RFID capabilities. Which of the following requirements would be MOST difficult for the asset manager to implement?

A. The ability to integrate environmental sensors into the RFID tag
B. The ability to assign RFID tags a unique identifier
C. The ability to track assets in real time as they move throughout the facility
D. The ability to encrypt RFID data in transmission

問題 #4

A network administrator notices a security intrusion on the web server. Which of the following is noticed by http://test.com/modules.php?op=modload&name=XForum&file=[hostilejavascript]&fid=2 in the log file?

A. Click jacking
B. SQL injection
C. Buffer overflow
D. XSS attack

問題 #5

A network engineer at Company ABC observes the following raw HTTP request:
GET /disp_reports.php?SectionEntered=57&GroupEntered=1&report_type=alerts&to_date=01-01-0101&Run=
Run&UserEntered=dsmith&SessionID=5f04189bc&from_date=31-102010&TypesEntered=1
HTTP/1.1 Host: test.example.net Accept: */* Accept-Language: en Connection: close Cookie: java14=1; java15=1; java16=1; js=1292192278001;
Which of the following should be the engineer's GREATEST concern?

A. The numerical encoding on the session ID is limited to hexadecimal characters, making it susceptible to a brute force attack.
B. Sensitive data is transmitted in the URL.
C. The HTTPS is not being enforced so the system is vulnerable.
D. The dates entered are outside a normal range, which may leave the system vulnerable to a denial of service attack.

解説：