CompTIA CAS-005 - CompTIA SecurityX Exam
Page: 3 / 95
Total 475 questions
Question #11 (Topic: Exam A)
A software development company wants to ensure that users can confirm the software is legitimate when installing it. Which of the following is the best way for the company to achieve this security objective?
A. Code signing
B. Non-repudiation
C. Key escrow
D. Private keys
Answer: A
Question #12 (Topic: Exam A)
While performing mandatory monthly patch updates on a production application server, the security analyst reports an instance of buffer overflow for a new application that was migrated to the cloud and is also publicly exposed. Security policy requires that only internal users have access to the application. Which of the following should the analyst implement to mitigate the issues reported? (Choose two.)
A. Configure firewall rules to block all external traffic.
B. Enable input validation for all fields.
C. Enable automatic updates to be installed on all servers.
D. Configure the security group to enable external traffic.
E. Set up a DLP policy to alert for exfiltration on all application servers.
F. Enable nightly vulnerability scans.
Answer: AB
Question #13 (Topic: Exam A)
PKI can be used to support security requirements in the change management process. Which of the following capabilities does PKI provide for messages?
A. Non-repudiation
B. Confidentiality
C. Delivery receipts
D. Attestation
Answer: A
Question #14 (Topic: Exam A)
Several unlabeled documents in a cloud document repository contain cardholder information. Which of the following configuration changes should be made to the DLP system to correctly label these documents in the future?
A. Digital rights management
B. Network traffic decryption
C. Regular expressions
D. Watermarking
Answer: C
Question #15 (Topic: Exam A)
A systems administrator at a web-hosting provider has been tasked with renewing the public certificates of all customer sites. Which of the following would best support multiple domain names while minimizing the amount of certificates needed?
A. OCSP
B. CRL
C. SAND. CA
Answer: C
