CompTIA CAS-005 問題集

質問 1：
An organization is looking for gaps in its detection capabilities based on the APTs that may target the industry. Which of the following should the security analyst use to perform threat modeling?
A. STRIDE
B. CAPEC
C. OWASP
D. ATT&CK
正解：D
解説: (Topexam メンバーにのみ表示されます)

質問 2：
Which of the following is record-level encryption commonly used to do?
A. Protect database fields.
B. Encrypt the master boot record.
C. Protect individual files.
D. Encrypt individual packets.
正解：A
解説: (Topexam メンバーにのみ表示されます)

質問 3：
During a recent assessment, a security analyst observed the following:

Which of the following should the analyst use to address the vulnerabilities in the future?
A. Least privilege
B. System image hardening
C. OS update
D. Defense in depth
正解：D

質問 4：
The Chief Information Security Officer (CISO) reviews some reports indicating that the length of time to patch endpoints with vulnerabilities has been steadily increasing. Many endpoints are missing security agents, and the number of unapproved BYOD endpoints has increased. Which of the following would be best to address the CISO's security concerns?
A. Using compliance baselines in the MDM to ensure all endpoints receive the required agents
B. Writing a formal BYOD policy to enforce application containerization and receive board approval
C. Using an Always On VPN for remote staff to receive patches faster
D. Implementing Conditional Access with device certifications and compliance requirements
正解：D
解説: (Topexam メンバーにのみ表示されます)

質問 5：
An analyst reviews a SIEM and generates the following report:

Only HOST002 is authorized for internet traffic. Which of the following statements is accurate?
A. The network connection activity is unusual, and a network infection is highly possible.
B. The VM002 host is misconfigured and needs to be revised by the network team.
C. The SIEM platform is reporting multiple false positives on the alerts.
D. The HOST002 host is under attack, and a security incident should be declared.
正解：C
解説: (Topexam メンバーにのみ表示されます)

質問 6：
After a recent outage, a software engineering company performed an audit of its development processes. The audit findings include the following:
- The use of local branches were not enforced for software development.
- Two-person review was not required for merges with production
pipelines.
- There was a lack of pre-production pipelines and insufficient bake
times between stages.
Which of the following changes would best improve the company's practices?
A. Architecture and integration review
B. Regression testing
C. Formal specification and verification
D. Coding standards and linting
正解：A
解説: (Topexam メンバーにのみ表示されます)

質問 7：
A security architect recommends replacing the company's monolithic software application with a containerized solution. Historically, secrets have been stored in the application's configuration files. Which of the following changes should the security architect make in the new system?
A. Run all Dockerfiles in a randomized namespace.
B. Store the secrets inside the Dockerfiles.
C. Save secrets in key escrow.
D. Use a secrets management tool.
正解：D
解説: (Topexam メンバーにのみ表示されます)

質問 8：
A software development company needs to mitigate third-party risks to its software supply chain.
Which of the following techniques should the company use in the development environment to best meet this objective?
A. Establishing coding standards and monitoring for compliance
B. Requiring multifactor authentication
C. Performing software composition analysis
D. Implementing a robust unit and regression-testing scheme
正解：C
解説: (Topexam メンバーにのみ表示されます)

質問 9：
An analyst needs to evaluate all images and documents that are publicly shared on a website.
Which of the following would be the best tool to evaluate the metadata of these files?
A. Ghidra
B. OllyDbg
C. Volatility
D. ExifTool
正解：D
解説: (Topexam メンバーにのみ表示されます)