CompTIA CAS-005 問題集

質問 1：
An incident response team is analyzing malware and observes the following:
* Does not execute in a sandbox
* No network loCs
* No publicly known hash match
* No process injection method detected
Which of thefollowing should the team do next to proceed with further analysis?
A. Utilize a new deployed machine to run the sample.
B. Use an online vims analysis tool to analyze the sample
C. Search oilier internal sources for a new sample.
D. Check for an anti-virtualization code in the sample
正解：D
解説: (Topexam メンバーにのみ表示されます)

質問 2：
An organization has been using self-managed encryption keys rather than the free keys managed by the cloud provider. The Chief Information Security Officer (CISO) reviews the monthly bill and realizes the self-managed keys are more costly than anticipated. Which of the following should the CISO recommend to reduce costs while maintaining a strong security posture?
A. Begin using cloud-managed keys on all new resources deployed in the cloud.
B. Adjust the configuration for cloud provider keys on data that is classified as public.
C. Utilize an on-premises HSM to locally manage keys.
D. Extend the key rotation period to one year so that the cloud provider can use cached keys.
正解：B
解説: (Topexam メンバーにのみ表示されます)

質問 3：
A company detects suspicious activity associated with external connections Security detection tools are unable tocategorize this activity. Which of the following is the best solution to help the company overcome this challenge?
A. implement UEBA
B. Implement an Interactive honeypot
C. Map network traffic to known loCs.
D. Monitor the dark web
正解：A
解説: (Topexam メンバーにのみ表示されます)

質問 4：

Which of the following is the security engineer most likely doing?
A. Threat hunting for suspicious activity from an insider threat
B. Baselining user behavior to support advancedanalytics
C. Reporting on remote log-in activities to track team metrics
D. Assessing log inactivities using geolocation to tune impossible Travel rate alerts
正解：D
解説: (Topexam メンバーにのみ表示されます)

質問 5：
A global organization wants to manage all endpoint and user telemetry. The organization also needs to differentiate this data based on which office it is correlated to. Which of the following strategies best aligns with this goal?
A. Sensor placement
B. Data labeling
C. Centralized logging
D. Continuous monitoring
正解：B
解説: (Topexam メンバーにのみ表示されます)

質問 6：
Which of the following best describes a common use case for homomorphic encryption?
A. Processing data on a server after decrypting in order to prevent unauthorized access in transit
B. Maintaining the confidentiality of data both at rest and in transit to and from a CSP for processing
C. Transmitting confidential data to a CSP for processing on a large number of resources without revealing information
D. Storing proprietary data across multiple nodes in a private cloud to prevent access by unauthenticated users
正解：C
解説: (Topexam メンバーにのみ表示されます)

質問 7：
A company wants to improve and automate the compliance of its cloud environments to meet industry standards. Which of the following resources should the company use to best achieve this goal?
A. Python
B. Jenkins
C. PowerShell
D. Ansible
正解：D
解説: (Topexam メンバーにのみ表示されます)

質問 8：
An organization that performs real-time financial processing is implementing a new backup solution. Given the following business requirements:
The backup solution must reduce the risk of potential backup compromise.
The backup solution must be resilient to a ransomware attack.
The time to restore from backups is less important than backup data integrity.
Multiple copies of production data must be maintained.
Which of the following backup strategies best meets these requirements?
A. Setting up anti-tampering on the databases to ensure data cannot be changed unintentionally
B. Utilizing two connected storage arrays and ensuring the arrays constantly sync
C. Enabling remote journaling on the databases to ensure real-time transactions are mirrored
D. Creating a secondary, immutable database and adding live data on a continuous basis
正解：D
解説: (Topexam メンバーにのみ表示されます)