CompTIA CAS-004試験情報,CAS-004試験問題集,CAS-004日本語試験|ktest
CompTIA Advanced SecurityPractitioner認定の新しい試験-CAS-004試験が利用可能です。 CompTIA CASP は、サイバーセキュリティの高度なスキルレベルで、マネージャーではなく、高度な実践者向けの唯一の実践的なパフォーマンスベースの認定です。 最新のCompTIA CAS-004の実際の試験問題を解き明かしました。これは、試験を勉強するのに最適な資料です。 また、以下の他のすべてのCompTIA CASP CAS-004試験情報も収集しました。
CompTIA CASP CAS-004試験
CompTIA CAS-004試験は、ガバナンス、リスク、およびコンプライアンス要件の影響を考慮しながら、回復力のある企業をサポートするために、複雑な環境全体で安全なソリューションを設計、エンジニアリング、統合、および実装するために必要な技術的知識とスキルをカバーします。
質問数：最大90
質問の種類：多肢選択式およびパフォーマンスベース
テストの長さ：165分
推奨される経験：一般的なITセキュリティの実務経験が10年以上あり、そのうち少なくとも5年はITセキュリティの幅広い実務経験があります。
合格点：合格/不合格のみ-スケーリングされたスコアなし
新しいひびの入ったCompTIACASP + CAS-004の実際の試験問題は、上記のすべてのトピックをテストするのに役立ちます。 以下のCompTIA認定CAS-004の実際の試験問題を共有してください。
1.A developer is creating a new mobile application for a company. The application uses REST API and TLS 1.2 to communicate securely with the external back-end server. Due to this configuration, the company is concerned about HTTPS interception attacks. Which of the following would be the BEST solution against this type of attack?
A. Wildcard certificates
B. Certificate pinning
C. HSTS
D. Cookies
Answer: C
2.An organization is designing a network architecture that must meet the following requirements:
Users will only be able to access predefined services.
Each user will have a unique allow list defined for access.
The system will construct one-to-one subject/object access paths dynamically.
Which of the following architectural designs should the organization use to meet these requirements?
A. Peer-to-peer secure communications enabled by mobile applications
B. Proxied application data connections enabled by API gateways
C. VLANs enabled by network infrastructure devices
D. Microsegmentation enabled by software-defined networking
Answer: D
3.The Chief information Officer (CIO) of a large bank, which uses multiple third-party organizations to deliver a service, is concerned about the handling and security of customer data by the parties. Which of the following should be implemented to BEST manage the risk?
A. Establish an audit program that regularly reviews all suppliers regardless of the data they access, how they access the data, and the type of data, Review all design and operational controls based on best practice standard and report the finding back to upper management.
B. Establish a governance program that rates suppliers based on their access to data, the type of data, and how they access the data Assign key controls that are reviewed and managed based on the supplier's rating. Report finding units that rely on the suppliers and the various risk teams.
C. Establish a team using members from first line risk, the business unit, and vendor management to assess only design security controls of all suppliers. Store findings from the reviews in a database for all other business units and risk teams to reference.
D. Establish a review committee that assesses the importance of suppliers and ranks them according to contract renewals. At the time of contract renewal, incorporate designs and operational controls into the contracts and a right-to-audit clause. Regularly assess the supplier's post-contract renewal with a dedicated risk management team.
Answer: D
4.A company in the financial sector receives a substantial number of customer transaction requests via email. While doing a root-cause analysis conceding a security breach, the CIRT correlates an unusual spike in port 80 traffic from the IP address of a desktop used by a customer relations employee who has access to several of the compromised accounts. Subsequent antivirus scans of the device do not return an findings, but the CIRT finds undocumented services running on the device. Which of the following controls would reduce the discovery time for similar in the future.
A. Configuring the mall to quarantine incoming attachment automatically
B. Implementing application blacklisting
C. Deploying host-based firewalls and shipping the logs to the SIEM
D. Increasing the cadence for antivirus DAT updates to twice daily
Answer: C
5.A security analyst is reviewing network connectivity on a Linux workstation and examining the active TCP connections using the command line. Which of the following commands would be the BEST to run to view only active Internet connections?
A. sudo netstat -nlt -p | grep "ESTABLISHED"
B. sudo netstat -antu | grep "LISTEN" | awk '{print$5}'
C. sudo netstat -plntu | grep -v "Foreign Address"
D. sudo netstat -pnut -w | column -t -s $'\w'
E. sudo netstat -pnut | grep -P tcp
Answer: A
認証
お支払方法
お問い合わせ
安全なお支払い
