CAS-003 문제 171
개발자는 SDLC 동안 동료의 작업에 대한 피드백을 제공해야 합니다. 코드 변경 사항을 검토하는 동안 웹 애플리케이션에 대한 개발자 세션 ID 토큰이 보안되지 않은 연결을 통해 전송됩니다. 다음 중 개발자가 취약점을 수정하기 위해 구현하도록 권장해야 하는 코드 조각은 무엇입니까?
A)
B)
C)
D)
A)
B)
C)
D)
CAS-003 문제 172
보안 엔지니어는 사무실에서 DNS 조회 요청이 더 이상 작동하지 않는다는 내용의 사고 티켓을 헬프 데스크에서 받습니다. 네트워크 팀은 레이어 2 및 레이어 3 연결이 작동하는지 확인했습니다. 다음 중 보안 엔지니어가 DNS 서버가 포트 53에서 수신 대기 중인지 확인하기 위해 사용하는 도구는 무엇입니까?
CAS-003 문제 173
An administrator is tasked with securing several website domains on a web server. The administrator elects to secure www.example.com, mail.example.org, archive.example.com, and www.example.org with the same certificate. Which of the following would allow the administrator to secure those domains with a single issued certificate?
CAS-003 문제 174
A security administrator is shown the following log excerpt from a Unix system:
2013 Oct 10 07:14:57 web14 sshd[1632]: Failed password for root from 198.51.100.23 port 37914 ssh2
2013 Oct 10 07:14:57 web14 sshd[1635]: Failed password for root from 198.51.100.23 port 37915 ssh2
2013 Oct 10 07:14:58 web14 sshd[1638]: Failed password for root from 198.51.100.23 port 37916 ssh2
2013 Oct 10 07:15:59 web14 sshd[1640]: Failed password for root from 198.51.100.23 port 37918 ssh2
2013 Oct 10 07:16:00 web14 sshd[1641]: Failed password for root from 198.51.100.23 port 37920 ssh2
2013 Oct 10 07:16:00 web14 sshd[1642]: Successful login for root from 198.51.100.23 port 37924 ssh2
Which of the following is the MOST likely explanation of what is occurring and the BEST immediate response? (Select TWO).
2013 Oct 10 07:14:57 web14 sshd[1632]: Failed password for root from 198.51.100.23 port 37914 ssh2
2013 Oct 10 07:14:57 web14 sshd[1635]: Failed password for root from 198.51.100.23 port 37915 ssh2
2013 Oct 10 07:14:58 web14 sshd[1638]: Failed password for root from 198.51.100.23 port 37916 ssh2
2013 Oct 10 07:15:59 web14 sshd[1640]: Failed password for root from 198.51.100.23 port 37918 ssh2
2013 Oct 10 07:16:00 web14 sshd[1641]: Failed password for root from 198.51.100.23 port 37920 ssh2
2013 Oct 10 07:16:00 web14 sshd[1642]: Successful login for root from 198.51.100.23 port 37924 ssh2
Which of the following is the MOST likely explanation of what is occurring and the BEST immediate response? (Select TWO).
CAS-003 문제 175
A security is testing a server finds the following in the output of a vulnerability scan:
Which of the following will the security analyst most likely use NEXT to explore this further?
Which of the following will the security analyst most likely use NEXT to explore this further?