CompTIA CAS-001 問題集

質問 1：
The helpdesk department desires to roll out a remote support application for internal use on all company computers. This tool should allow remote desktop sharing, system log gathering, chat, hardware logging, inventory management, and remote registry access. The risk management team has been asked to review vendor responses to the RFQ. Which of the following questions is the MOST important?
A. What encryption standards are used in remote desktop and file transfer functionality?
B. What are the protections against MITM?
C. What encryption standards are used in tracking database?
D. What accountability is built into the remote support application?
E. What snapshot or "undo" features are present in the application?
正解：D

質問 2：
If a technician must take an employee's workstation into custody in response to an
investigation, which of the following can BEST reduce the likelihood of related legal issues?
A. A screen displayed at log in that informs users of the employer's rights to seize, search, and monitor company devices.
B. A printout of an activity log, showing that the employee has been spending substantial time on non-work related websites.
C. A formal training and awareness program on information security for all company managers.
D. A formal letter from the company's president approving the seizure of the workstation.
正解：A

質問 3：
The Chief Executive Officer (CEO) of a large prestigious enterprise has decided to reduce business costs by outsourcing to a third party company in another country. Functions to be
outsourced include: business analysts, testing, software development and back office functions that deal with the processing of customer data. The Chief Risk Officer (CRO) is concerned about the outsourcing plans. Which of the following risks are MOST likely to occur if adequate controls are not implemented?
A. Cultural differences, increased cost of doing business and divestiture issues
B. Improper handling of client data, interoperability agreement issues and regulatory issues
C. Geographical regulation issues, loss of intellectual property and interoperability agreement issues
D. Improper handling of customer data, loss of intellectual property and reputation damage
正解：D

質問 4：
A corporation has Research and Development (R&D) and IT support teams, each requiring separate networks with independent control of their security boundaries to support department objectives. The corporation's Information Security Officer (ISO) is responsible for providing firewall services to both departments, but does not want to increase the hardware footprint within the datacenter. Which of the following should the ISO consider to provide the independent functionality required by each department's IT teams?
A. Provide each department with a virtual firewall and assign administrative control to the physical firewall.
B. Put both departments behind the firewall and assign administrative control for each department to the corporate firewall.
C. Put both departments behind the firewall and incorporate restrictive controls on each department's network.
D. Provide each department with a virtual firewall and assign appropriate levels of management for the virtual device.
正解：D

質問 5：
An IT administrator has been tasked by the Chief Executive Officer with implementing security using a single device based on the following requirements:
1.Selective sandboxing of suspicious code to determine malicious intent.
2.VoIP handling for SIP and H.323 connections.
3.Block potentially unwanted applications.
Which of the following devices would BEST meet all of these requirements?
A. UTM
B. HIDS
C. WAF
D. NIDS
E. HSM
正解：A

質問 6：
The Chief Information Officer (CIO) of Company XYZ has returned from a large IT conference where one of the topics was defending against zero day attacks - specifically deploying third party patches to vulnerable software. Two months prior, the majority of the company systems were compromised because of a zero day exploit. Due to budget constraints the company only has operational systems. The CIO wants the Security Manager to research the use of these patches. Which of the following is the GREATEST concern with the use of a third party patch to mitigate another un-patched vulnerability?
A. Another period of vulnerability will be introduced because of the need to remove the third party patch prior to installing any vendor patch.
B. The company's patch management solution only supports patches and updates released directly by the vendor.
C. The company does not have an adequate test environment to validate the impact of the third party patch, introducing unknown risks.
D. The third party patch may introduce additional unforeseen risks and void the software licenses for the patched applications.
正解：C

質問 7：
A system designer needs to factor in CIA requirements for a new SAN. Which of the CIA requirements is BEST met by multipathing?
A. Integrity
B. Availability
C. Confidentiality
D. Authentication
正解：B

質問 8：
Driven mainly by cost, many companies outsource computing jobs which require a large amount of processor cycles over a short duration to cloud providers. This allows the company to avoid a large investment in computing resources which will only be used for a short time.
Assuming the provisioned resources are dedicated to a single company, which of the following is the MAIN vulnerability associated with on-demand provisioning?
A. Failure of the de-provisioning mechanism resulting in excessive charges for the resources
B. Traces of proprietary data which can remain on the virtual machine and be exploited
C. Exposure of proprietary data when in-transit to the cloud provider through IPSec tunnels
D. Remnants of network data from prior customers on the physical servers during a compute job
正解：B