CAS-004 무료 덤프문제 온라인 액세스

Which of the following is the MOST important cloud-specific risk from the CSP's viewpoint?

• A.Management plane breach
• B.Isolation control failure
• C.Resource exhaustion
• D.Insecure data deletion

A company is migrating from company-owned phones to a BYOD strategy for mobile devices. The pilot program will start with the executive management team and be rolled out to the rest of the staff in phases. The company's Chief Financial Officer loses a phone multiple times a year.
Which of the following will MOST likely secure the data on the lost device?

• A.Require MFA to access company applications.
• B.Set up different profiles based on the person's risk.
• C.Require a VPN to be active to access company data.
• D.Remotely wipe the device.

A company is migrating its data center to the cloud. Some hosts had been previously isolated, but a risk assessment convinced the engineering team to reintegrate the systems. Because the systems were isolated, the risk associated with vulnerabilities was low. Which of the following should the security team recommend be performed before migrating these servers to the cloud?

• A.Deploying host and network IDS
• B.Creating a honeypot and adding decoy files
• C.Performing patching and hardening
• D.Implementing least functionality and time-based access

A security architect needs to implement a CASB solution for an organization with a highly distributed remote workforce. One Of the requirements for the implementation includes the capability to discover SaaS applications and block access to those that are unapproved or identified as risky. Which of the following would BEST achieve this objective?

• A.Deploy endpoint agents that monitor local web traffic and control access according to centralized policy.
• B.Deploy endpoint agents that monitor local web traffic to enforce DLP and encryption policies.
• C.Implement cloud infrastructure to proxy all user web traffic and control access according to centralized policy.
• D.Implement cloud infrastructure to proxy all user web traffic to enforce DI-P and encryption policies.

Which of the following best explain why organizations prefer to utilize code that is digitally signed? (Select two).

• A.It verifies integrity.
• B.It verifies the recipient's identity.
• C.It provides origin assurance.
• D.It ensures the code is free of malware.
• E.It integrates with DRMs.
• F.It provides increased confidentiality.