무료 온라인 액세스 CompTIA.CAS-003.v2022-12-20.q589 모의 시험 (Page 37)

CAS-003 문제 176

An organization relies heavily on third-party mobile applications for official use within a BYOD deployment scheme. An excerpt from an approved text-based-chat client application AndroidManifest.xml is as follows:

Which of the following would restrict application permissions while minimizing the impact to normal device operations?

A. Add the application to the enterprise mobile whitelist.

B. Wrap the application before deployment

C. Install the application outside of the corporate container

D. Use the MDM to disable the devices' recording microphones and SMS

CAS-003 문제 177

회사 ABC의 SAN이 용량에 가까워지고 있으며 서버에 디스크 공간이 부족하면 비용이 많이 드는 가동 중지 시간이 발생합니다. 다음 중 새 SAN을 구입하는 것보다 비용 효율적인 대안은 무엇입니까?

A. 다중 경로를 활성화하여 가용성 향상

B. 스토리지 풀에서 중복 제거 활성화

C. 가상 디스크 크기를 줄이기 위한 스냅샷 구현

D. 오프사이트 데이터 센터에 복제 구현

CAS-003 문제 178

A financial institution's information security officer is working with the risk management officer to determine what to do with the institution's residual risk after all security controls have been implemented. Considering the institution's very low risk tolerance, which of the following strategies would be BEST?

A. Accept the risk.

B. Transfer the risk.

C. Avoid the risk

D. Mitigate the risk.

CAS-003 문제 179

An online bank has contracted with a consultant to perform a security assessment of the bank's web portal.
The consultant notices the login page is linked from the main page with HTTPS, but when the URL is changed to HTTP, the browser is automatically redirected back to the HTTPS site. Which of the following is a concern for the consultant, and how can it be mitigated?

A. XSS could be used to inject code into the login page during the redirect to the HTTPS site. The consultant should implement a WAF to prevent this.

B. The HTTP traffic is vulnerable to network sniffing, which could disclose usernames and passwords to an attacker. The consultant should recommend disabling HTTP on the web server.

C. A successful MITM attack Could intercept the redirect and use sslstrip to decrypt further HTTPS traffic. Implementing HSTS on the web server would prevent this.

D. The consultant is concerned the site is using an older version of the SSL 3.0 protocol that is vulnerable to a variety of attacks. Upgrading the site to TLS 1.0 would mitigate this issue.

CAS-003 문제 180

A security analyst for a bank received an anonymous tip on the external banking website showing the following:
Protocols supported
TLS 1.0
SSL 3
SSL 2
Cipher suites supported
TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA-ECDH p256r1
TLS_DHE_RSA_WITH_AES_256_CBC_SHA-DH 1024bit
TLS_RSA_WITH_RC4_128_SHA
TLS_FALLBACK_SCSV non supported
POODLE
Weak PFS
OCSP stapling supported
Which of the following should the analyst use to reproduce these findings comprehensively?

A. Perform a POODLE (SSLv3) attack using an exploitations framework and inspect the output.

B. Query the OCSP responder and review revocation information for the user certificates.

C. Review CA-supported ciphers and inspect the connection through an HTTP proxy.

D. Inspect the server certificate and simulate SSL/TLS handshakes for enumeration.

다른 버전: 5038CompTIA.CAS-003.v2022-07-04.q589; 2159CompTIA.CAS-003.v2022-05-09.q215

최근 업로드: 102Oracle.1Z0-1160-1.v2025-09-10.q18; 102Oracle.1z0-1054-25.v2025-09-10.q50; 101Cisco.300-710.v2025-09-10.q297; 102VMware.2V0-41.24.v2025-09-10.q104; 131Avaya.78201X.v2025-09-09.q135; 135CompTIA.220-1202.v2025-09-09.q57; 132CheckPoint.156-215.81.v2025-09-09.q391; 168ECCouncil.312-50v13.v2025-09-09.q347; 126Supermicro.SMI300XS.v2025-09-08.q15; 122Oracle.1z0-1104-25.v2025-09-08.q12