최신CompTIA SecurityX Certification - CAS-005무료샘플문제
문제1
A company's help desk is experiencing a large number of calls from the finance department stating access issues to www.bank.com. The security operations center reviewed the following security logs:
Which of the following is most likely the cause of the issue?
A company's help desk is experiencing a large number of calls from the finance department stating access issues to www.bank.com. The security operations center reviewed the following security logs:
Which of the following is most likely the cause of the issue?
정답: D
설명: (ExamPassdump 회원만 볼 수 있음)
문제2
A security analyst detected unusual network traffic related to program updating processes. The analyst collected artifacts from compromised user workstations. The discovered artifacts were binary files with the same name as existing valid binaries but with different hashes. Which of the following solutions would most likely prevent this situation from reoccurring?
A security analyst detected unusual network traffic related to program updating processes. The analyst collected artifacts from compromised user workstations. The discovered artifacts were binary files with the same name as existing valid binaries but with different hashes. Which of the following solutions would most likely prevent this situation from reoccurring?
정답: B
설명: (ExamPassdump 회원만 볼 수 있음)
문제3
An organization recently migrated data to a new file management system. The architect decides to use a discretionary authorization model on the new system. Which of the following best explains the architect's choice?
An organization recently migrated data to a new file management system. The architect decides to use a discretionary authorization model on the new system. Which of the following best explains the architect's choice?
정답: B
설명: (ExamPassdump 회원만 볼 수 있음)
문제4
A company has integrated source code from a subcontractor into its security product. The subcontractor is located in an adversarial country and has informed the company of a requirement to escrow the source code with the subcontractor's government. Which of the following is a potential security risk arising from this situation?
A company has integrated source code from a subcontractor into its security product. The subcontractor is located in an adversarial country and has informed the company of a requirement to escrow the source code with the subcontractor's government. Which of the following is a potential security risk arising from this situation?
정답: C
설명: (ExamPassdump 회원만 볼 수 있음)
문제5
A security engineer is reviewing the results of an annual penetration test. The report lists one of the results as "critical severity" on several domain-joined workstations:
SSL/TLS Weak Protocols Supported TLS 1.0, TLS 1.1
Which of the following should the security engineer implement to remediate this finding in the most centralized manner?
A security engineer is reviewing the results of an annual penetration test. The report lists one of the results as "critical severity" on several domain-joined workstations:
SSL/TLS Weak Protocols Supported TLS 1.0, TLS 1.1
Which of the following should the security engineer implement to remediate this finding in the most centralized manner?
정답: D
설명: (ExamPassdump 회원만 볼 수 있음)
문제6
A hotel chain wants to use point-of-sale systems to allow customers to check in and out of their rooms without employee assistance. These systems should limit access to a specific set of programs approved to run, with all other programs blocked. Which of the following should the company configure to best support this goal?
A hotel chain wants to use point-of-sale systems to allow customers to check in and out of their rooms without employee assistance. These systems should limit access to a specific set of programs approved to run, with all other programs blocked. Which of the following should the company configure to best support this goal?
정답: C
설명: (ExamPassdump 회원만 볼 수 있음)
문제7
A software development company needs to mitigate third-party risks to its software supply chain.
Which of the following techniques should the company use in the development environment to best meet this objective?
A software development company needs to mitigate third-party risks to its software supply chain.
Which of the following techniques should the company use in the development environment to best meet this objective?
정답: A
설명: (ExamPassdump 회원만 볼 수 있음)
문제8
Which of the following best explains why AI output could be inaccurate?
Which of the following best explains why AI output could be inaccurate?
정답: A
설명: (ExamPassdump 회원만 볼 수 있음)
문제9
A security team is responding to malicious activity and needs to determine the scope of impact.
The malicious activity appears to affect a certain version of an application used by the organization. Which of the following actions best enables the team to determine the scope of impact?
A security team is responding to malicious activity and needs to determine the scope of impact.
The malicious activity appears to affect a certain version of an application used by the organization. Which of the following actions best enables the team to determine the scope of impact?
정답: C
설명: (ExamPassdump 회원만 볼 수 있음)
문제10
PKI can be used to support security requirements in the change management process. Which of the following capabilities does PKI provide for messages?
PKI can be used to support security requirements in the change management process. Which of the following capabilities does PKI provide for messages?
정답: B
설명: (ExamPassdump 회원만 볼 수 있음)
문제11
A security administrator needs to develop a remediation plan to address a large number of vulnerability scan results. Which of the following should the administrator use to determine the vulnerabilities that should be addressed first?
A security administrator needs to develop a remediation plan to address a large number of vulnerability scan results. Which of the following should the administrator use to determine the vulnerabilities that should be addressed first?
정답: A
설명: (ExamPassdump 회원만 볼 수 있음)
문제12
An organization is developing an AI-enabled digital worker to help employees complete common tasks, such as template development, editing, research, and scheduling. As part of the AI workload, the organization wants to implement guardrails within the platform. Which of the following should the company do to secure the AI environment?
An organization is developing an AI-enabled digital worker to help employees complete common tasks, such as template development, editing, research, and scheduling. As part of the AI workload, the organization wants to implement guardrails within the platform. Which of the following should the company do to secure the AI environment?
정답: D
설명: (ExamPassdump 회원만 볼 수 있음)
문제13
A security analyst was monitoring the networks of a group of companies. The analyst identified several periods of concentrated, coordinated activity by unknown actors. The activity repeated at regular intervals and affected all the companies. Minor hardware outages that correlated with the same times as the discovered activity escalated in severity. Which of the following threat actors was most likely involved?
A security analyst was monitoring the networks of a group of companies. The analyst identified several periods of concentrated, coordinated activity by unknown actors. The activity repeated at regular intervals and affected all the companies. Minor hardware outages that correlated with the same times as the discovered activity escalated in severity. Which of the following threat actors was most likely involved?
정답: B
설명: (ExamPassdump 회원만 볼 수 있음)
문제14
A company updates its cloud-based services by saving infrastructure code in a remote repository.
The code is automatically deployed into the development environment every time the code is saved to the repository. The developers express concern that the deployment often fails, citing minor code issues and occasional security control check failures in the development environment.
Which of the following should a security engineer recommend to reduce the deployment failures?
(Choose two.)
A company updates its cloud-based services by saving infrastructure code in a remote repository.
The code is automatically deployed into the development environment every time the code is saved to the repository. The developers express concern that the deployment often fails, citing minor code issues and occasional security control check failures in the development environment.
Which of the following should a security engineer recommend to reduce the deployment failures?
(Choose two.)
정답: A,D