무료 온라인 액세스 CompTIA.CAS-003.v2022-12-20.q589 모의 시험 (Page 7)

CAS-003 문제 26

A company provides on-demand cloud computing resources for a sensitive project. The company implements a fully virtualized datacenter and terminal server access with two-factor authentication for customer access to the administrative website. The security administrator at the company has uncovered a breach in data confidentiality. Sensitive data from customer A was found on a hidden directory within the VM of company B.
Company B is not in the same industry as company A and the two are not competitors. Which of the following has MOST likely occurred?

A. Both VMs were left unsecured and an attacker was able to exploit network vulnerabilities to access each and move the data.

B. A stolen two factor token was used to move data from one virtual guest to another host on the same network segment.

C. A hypervisor server was left un-patched and an attacker was able to use a resource exhaustion attack to gain unauthorized access.

D. An employee with administrative access to the virtual guests was able to dump the guest memory onto a mapped disk.

CAS-003 문제 27

While investigating suspicious activity on a server, a security administrator runs the following report:

In addition, the administrator notices changes to the /etc/shadow file that were not listed in the report. Which of the following BEST describe this scenario? (Choose two.)

A. An attacker compromised the server and may have used SELinux mandatory access controls to hide the changes to the /etc/shadow file

B. An attacker compromised the server and may have installed a rootkit to always generate valid MD5 hashes to hide the changes to the /etc/shadow file

C. An attacker compromised the server and may have also compromised the file integrity database to hide the changes to the /etc/shadow file

D. An attacker compromised the server and may have used a collision hash in the MD5 algorithm to hide the changes to the /etc/shadow file

E. An attacker compromised the server and may have used MD5 collision hashes to generate valid passwords, allowing further access to administrator accounts on the server

CAS-003 문제 28

Company ABC is hiring customer service representatives from Company XYZ. The representatives reside at Company XYZ's headquarters. Which of the following BEST prevents Company XYZ representatives from gaining access to unauthorized Company ABC systems?

A. Require each Company XYZ employee to use an IPSec connection to the required systems

B. Require Company XYZ employees to establish an encrypted VDI session to the required systems

C. Require Company ABC employees to use two-factor authentication on the required systems

D. Require a site-to-site VPN for intercompany communications

CAS-003 문제 29

Joe, a hacker, has discovered he can specifically craft a webpage that when viewed in a browser crashes the browser and then allows him to gain remote code execution in the context of the victim's privilege level. The browser crashes due to an exception error when a heap memory that is unused is accessed. Which of the following BEST describes the application issue?

A. Integer overflow

B. Click-jacking

C. Race condition

D. SQL injection

E. Use after free

F. Input validation

정답: E

Use-After-Free vulnerabilities are a type of memory corruption flaw that can be leveraged by hackers to execute arbitrary code.
Use After Free specifically refers to the attempt to access memory after it has been freed, which can cause a program to crash or, in the case of a Use-After-Free flaw, can potentially result in the execution of arbitrary code or even enable full remote code execution capabilities.
According to the Use After Free definition on the Common Weakness Enumeration (CWE) website, a Use After Free scenario can occur when "the memory in question is allocated to another pointer validly at some point after it has been freed. The original pointer to the freed memory is used again and points to somewhere within the new allocation. As the data is changed, it corrupts the validly used memory; this induces undefined behavior in the process." Incorrect Answers:
A: Integer overflow is the result of an attempt by a CPU to arithmetically generate a number larger than what can fit in the devoted memory storage space. Arithmetic operations always have the potential of returning unexpected values, which may cause an error that forces the whole program to shut down. This is not what is described in this question.
B: Clickjacking is a malicious technique of tricking a Web user into clicking on something different from what the user perceives they are clicking on, thus potentially revealing confidential information or taking control of their computer while clicking on seemingly innocuous web pages. This is not what is described in this question.
C: A race condition is an undesirable situation that occurs when a device or system attempts to perform two or more operations at the same time, but because of the nature of the device or system, the operations must be done in the proper sequence to be done correctly. This is not what is described in this question.
D: SQL injection is a type of security exploit in which the attacker adds Structured Query Language (SQL) code to a Web form input box to gain access to resources or make changes to data. This is not what is described in this question.
F: Input validation is used to ensure that the correct data is entered into a field. For example, input validation would prevent letters typed into a field that expects number from being accepted. This is not what is described in this question.
References:
http://www.webopedia.com/TERM/U/use-after-free.html
https://en.wikipedia.org/wiki/Clickjacking
http://searchstorage.techtarget.com/definition/race-condition

CAS-003 문제 30

서비스 제공자의 보안 관리자는 서비스 제공자 백본에 대한 연결을 위해 두 벤더를 승인했습니다. 한 공급업체는 지불 카드 서비스에 대한 인증 서비스를 제공하고 다른 공급업체는 서비스 제공업체 인프라 사이트에 대한 유지 관리를 제공합니다. 다음 비즈니스 계약 중 공급업체와 서비스 제공업체의 관계와 가장 관련이 있는 것은 무엇입니까?

A. 양해각서

B. 상호접속 보안 동의서

C. 비공개 동의서

D. 운영 수준 계약

프리미엄 번들

DumpTop 에서 공유하는 최신 CAS-003 시험 덤프는 CAS-003 시험패스를 도와드릴수 있습니다! DumpTop 은 최근 업데이트된 CAS-003 시험자료를 제공해드립니다. DumpTop CAS-003 덤프도 시험문제 변경에 따라 업데이트되었으며 오답도 수정되었습니다. DumpTop CAS-003 덤프 최신버전을 공유받아보세요.

CAS-003 덤프 프리미엄 버전 액세스

(683 Q&As 덤프, 30%OFF할인코드: KrDump)

다른 버전: 4967CompTIA.CAS-003.v2022-07-04.q589; 2126CompTIA.CAS-003.v2022-05-09.q215

최근 업로드: 108Oracle.1Z0-908.v2025-09-06.q68; 111Oracle.1Z0-1055-24.v2025-09-05.q29; 273VMware.2V0-13.24.v2025-09-04.q75; 119Qlik.QSBA2022.v2025-09-04.q17; 121Oracle.1Z0-1073-23.v2025-09-03.q29; 120Cisco.300-820.v2025-09-03.q187; 117Oracle.1z0-1060-25.v2025-09-03.q26; 127CIPS.L5M4.v2025-09-02.q13; 140Fortinet.FCP_ZCS-AD-7.4.v2025-09-02.q12; 117PECB.ISO-45001-Lead-Auditor.v2025-09-02.q14