CompTIA CAS-003 問題集

質問 1：
A penetration test is being scoped for a set of web services with API endpoints. The APIs will be hosted on existing web application servers. Some of the new APIs will be available to unauthenticated users, but some will only be available to authenticated users. Which of the following tools or activities would the penetration tester MOST likely use or do during the engagement? (Select TWO.)
A. Intercepting proxy
B. Port scanner
C. Reconnaissance gathering
D. Static code analyzer
E. Reverse engineering
F. User acceptance testing
正解：A,C

質問 2：
A security administrator wants to stand up a NIPS that is multilayered and can incorporate many security technologies into a single platform The product should have diverse capabilities, such as antivirus, VPN, and firewall services, and be able to be updated in a timely manner to meet evolving threats. Which of the following network prevention system types can be used to satisfy the requirements?
A. Content-based IPS
B. Application firewall
C. Enterprise firewall
D. Unified threat management
正解：B

質問 3：
A regional business is expecting a severe winter storm next week. The IT staff has been reviewing corporate policies on how to handle various situations and found some are missing or incomplete. After reporting this gap in documentation to the information security manager, a document is immediately drafted to move various personnel to other locations to avoid downtime in operations. This is an example of:
A. a risk avoidance plan
B. an incident response plan
C. a disaster recovery plan
D. a business continuity plan
正解：C

質問 4：
A software development firm wants to validate the use of standard libraries as part of the software development process Each developer performs unit testing prior to committing changes to the code repository. Which of the following activities would be BEST to perform after a commit but before the creation of a branch?
A. Heuristic analysis
B. Penetration testing
C. Dynamic analysis
D. Web application vulnerability scanning
E. Static analysis
正解：E

質問 5：
The Chief information Officer (CIO) asks the system administrator to improve email security at the company based on the following requirements:
* Transaction being requested by unauthorized individuals.
* Complete discretion regarding client names, account numbers, and investment information.
* Malicious attackers using email to malware and ransomeware.
* Exfiltration of sensitive company information.
The cloud-based email solution will provide anti-malware reputation-based scanning, signature-based scanning, and sandboxing. Which of the following is the BEST option to resolve the boar's concerns for this email migration?
A. SSL VPN
B. Application whitelisting
C. Data loss prevention
D. Endpoint detection response
正解：C

質問 6：
After an employee was terminated, the company discovered the employee still had access to emails and attached content that should have been destroyed during the off-boarding. The employee's laptop and cell phone were confiscated and accounts were disabled promptly. Forensic investigation suggests the company's DLP was effective, and the content in question was not sent outside of work or transferred to removable medi a. Personality owned devices are not permitted to access company systems or information.
Which of the following would be the MOST efficient control to prevent this from occurring in the future?
A. Install application whitelist on mobile devices.
B. Perform unannounced insider threat testing on high-risk employees.
C. Prevent backup of mobile devices to personally owned computers.
D. Disallow side loading of applications on mobile devices.
E. Restrict access to company systems to expected times of day and geographic locations.
正解：D

質問 7：
An information security manager conducted a gap analysis, which revealed a 75% implementation of security controls for high-risk vulnerabilities, 90% for medium vulnerabilities, and 10% for low-risk vulnerabilities. To create a road map to close the identified gaps, the assurance team reviewed the likelihood of exploitation of each vulnerability and the business impact of each associated control. To determine which controls to implement, which of the following is the MOST important to consider?
A. KPI
B. BIA
C. KRI
D. GRC
正解：A

質問 8：
A government entity is developing requirements for an RFP to acquire a biometric authentication system When developing these requirements, which of the following considerations is MOST critical to the verification and validation of the SRTM?
A. Local and national laws and regulations
B. Secure software development requirements
C. Testability of requirements
D. Environmental constraint requirements
正解：A