CAS-003 무료 덤프문제 온라인 액세스

A security is testing a server finds the following in the output of a vulnerability scan:

Which of the following will the security analyst most likely use NEXT to explore this further?

• A.Reverse engineering tools
• B.Visualization tool
• C.Exploitation framework
• D.Vulnerability scanner

A company is implementing a new MFA initiative. The requirements for the second factor ate as folio.*.s
* It cannot be phished
* it must work as a second factor for laptop logins
* It must be something the user has
Which of the following solutions should the company choose?

• A.User biometrics
• B.SMS notification to a managed device
• C.TOTP hardware keys
• D.U2F hardware keys
• E.Push ratification to a mobile device

A security engineer is making certain URLs from an internal application available on the Internet The development team requires the following
* The URLs are accessible only from internal IP addresses
* Certain countries are restricted
* TLS is implemented.
* System users transparently access internal application services in a round robin to maximize performance Which of the following should the security engineer deploy7

• A.A load balancer with IP ACL restrictions and a commercially available PKI certificate
• B.An application-aware firewall with geofencing and certificate services using DNS for traffic direction
• C.DNS to direct traffic and a WAF with only the specific external URLs configured
• D.A load balancer with GeolP restrictions and least-load-sensing traffic distribution

An organization is concerned that its hosted web servers are not running the most updated version of software. Which of the following would work BEST to help identify potential vulnerabilities?

• A.nmap comptia.org -p 80 -sV
• B.nc -1 -v comptia.org -p 80
• C.hping3 -S comptia.org -p 80
• D.nslookup -port=80 comptia.org

A systems security engineer is assisting an organization's market survey team in reviewing requirements for an upcoming acquisition of mobile devices. The engineer expresses concerns to the survey team about a particular class of devices that uses a separate SoC for baseband radio I/O. For which of the following reasons is the engineer concerned?

• A.The associated firmware is more likely to remain out of date and potentially vulnerable
• B.The organization will be unable to restrict the use of NFC, electromagnetic induction, and Bluetooth technologies
• C.These devices can communicate over networks older than HSPA+ and LTE standards, exposing device communications to poor encryptions routines
• D.The manufacturers of the baseband radios are unable to enforce mandatory access controls within their driver set