CompTIA CAS-003 問題集

質問 1：
A security engineer must establish a method to assess compliance with company security policies as they apply to the unique configuration of individual endpoints, as well as to the shared configuration policies of common devices.

Which of the following tools is the security engineer using to produce the above output?
A. SIEM
B. Port scanner
C. SCAP scanner
D. Vulnerability scanner
正解：A

質問 2：
After multiple service interruptions caused by an older datacenter design, a company decided to migrate away from its datacenter. The company has successfully completed the migration of all datacenter servers and services to a cloud provider. The migration project includes the following phases:
Selection of a cloud provider
Architectural design
Microservice segmentation
Virtual private cloud
Geographic service redundancy
Service migration
The Chief Information Security Officer (CISO) is still concerned with the availability requirements of critical company applications.
Which of the following should the company implement NEXT?
A. Hybrid cloud solution
B. Single-tenancy private cloud
C. Cloud access security broker
D. Multicloud solution
正解：C

質問 3：
Which of the following risks does expanding business into a foreign country carry?
A. Some security tools might be monitored by legal authorities
B. Data ownership might revert to the regulatory entities in the new country
C. Data sovereignty laws could result in unexpected liability
D. Export controls might decrease software costs
正解：C

質問 4：
An administrator is working with management to develop policies related to the use of the cloud-based resources that contain corporate dat a. Management plans to require some control over organizational data stored on personal devices, such as tablets. Which of the following controls would BEST support management's policy?
A. MFA
B. Sandboxing
C. FDE
D. Mobile tokenization
E. MDM
正解：B

質問 5：
A security analyst is reviewing an endpoint that was found to have a rookit installed. The rootkit survived multiple attempts to clean the endpoints, as well as an attempt to reinstall the QS. The security analyst needs to implement a method to prevent other endpoint from having similar issues. Which of the following would BEST accomplish this objective?
A. Reinstall the OS with known-good media.
B. Enforce the secure boot process.
C. Reset the motherboard's TPM chip.
D. Utilize measured boot attestation.
E. Configure custom anti-malware rules.
正解：D

質問 6：
A security analyst is reviewing weekly email reports and finds an average of 1.000 emails received daily from the internal security alert email address. Which of the following should be implemented?
A. Machine learning algorithms
B. Tuning the networking monitoring service
C. DoS attack prevention
D. Separation of duties for systems administrators
正解：B

質問 7：
As part of the asset management life cycle, a company engages a certified equipment disposal vendor to appropriately recycle and destroy company assets that are no longer in use. As part of the company's vendor due diligence, which of the following would be MOST important to obtain from the vendor?
A. A signed NDA that covers all the data contained on the corporate systems.
B. A copy of the vendor's information security policies.
C. A copy of the current audit reports and certifications held by the vendor.
D. A copy of the procedures used to demonstrate compliance with certification requirements.
正解：A

質問 8：
A hospital is deploying new imaging softwares that requires a web server for access to image for both local and remote users. The web server allows user authentication via secure LDAP. The information security officer wants to ensure the server does not allow unencrypted access to the imaging server by using Nmap to gather additional information. Given the following.
* The imaging server IP is 192.168.101.24
* The domain controller IP is 192.168.100.1
* The client machine IP is 192.168.200.37
Which of the following should be used to confirm this is the only open post on the web server?
A. nmap "p 80,443,389,636 192.168.100.1
B. nmap "p 80,389 192.168.200.37
C. nmap "p" 192.168.101.24
D. nmap "p 80,443 192.168.101.24
正解：D