CompTIA CAS-005 問題集

質問 1：
After an incident occurred, a team reported during the lessons-learned review that the team.
* Lost important Information for further analysis.
* Did not utilize the chain of communication
* Did not follow the right steps for a proper response
Which of the following solutions is the best way to address these findinds?
A. Requesting budget for better forensic tools to Improve technical capabilities for Incident response operations
B. Building playbooks for different scenarios and performing regular table-top exercises
C. Requiring professional incident response certifications tor each new team member
D. Publishing the incident response policy and enforcing it as part of the security awareness program
正解：B
解説: (Topexam メンバーにのみ表示されます)

質問 2：
A security analyst received a report that an internal web page is down after a company-wide update to the web browser Given the following error message:

Which of the following is the best way to fix this issue?
A. Disabling all deprecated ciphers
B. Blocking all non-essential pons
C. Discontinuing the use of self-signed certificates
D. Rewriting any legacy web functions
正解：C
解説: (Topexam メンバーにのみ表示されます)

質問 3：
A company receives several complaints from customers regarding its website. An engineer implements a parser for the web server logs that generates the following output:

which of the following should the company implement to best resolve the issue?
A. IDS
B. CDN
C. WAF
D. NAC
正解：B
解説: (Topexam メンバーにのみ表示されます)

質問 4：
A security officer performs due diligence activities before implementing a third-party solution into the enterprise environment. The security officer needs evidence from the third party that a data subject access request handling process is in place. Which of the following is the security officer most likely seeking to maintain compliance?
A. Information security standards
B. Privacy regulations
C. E-discovery requirements
D. Reporting frameworks
E. Certification requirements
正解：B
解説: (Topexam メンバーにのみ表示されます)

質問 5：
An organization wants to implement a platform to better identify which specific assets are affected by a given vulnerability. Which of the following components provides the best foundation to achieve this goal?
A. SBoM
B. CMDB
C. SASE
D. SLM
正解：B
解説: (Topexam メンバーにのみ表示されます)

質問 6：
A global manufacturing company has an internal application mat is critical to making products This application cannot be updated and must Be available in the production area A security architect is implementing security for the application. Which of the following best describes the action the architect should take-?
A. Deploy Intrusion detection capabilities using a network tap
B. Disallow wireless access to the application.
C. Create a separate network for users who need access to the application
D. Create an acceptable use policy for the use of the application
正解：C
解説: (Topexam メンバーにのみ表示されます)

質問 7：
After some employees were caught uploading data to online personal storage accounts, a company becomes concerned about data leaks related to sensitive, internal documentation. Which of the following would the company most likely do to decrease this type of risk?
A. Implement a cloud-access security broker
B. Deploy an internet proxy that filters certain domains
C. Create SIEM rules to raise alerts for access to those platforms
D. Improve firewall rules to avoid access to those platforms.
正解：A
解説: (Topexam メンバーにのみ表示されます)

質問 8：
A hospital provides tablets to its medical staff to enable them to more quickly access and edit patients' charts.
The hospital wants to ensure that if a tablet is Identified as lost or stolen and a remote command is issued, the risk of data loss can be mitigated within seconds. The tablets are configured as follows to meet hospital policy
* Full disk encryption is enabled
* "Always On" corporate VPN is enabled
* ef-use-backed keystore is enabled'ready.
* Wi-Fi 6 is configured with SAE.
* Location services is disabled.
*Application allow list is configured
A. Returning on the device's solid-state media to zero
B. Configuring the application allow list to only per mil emergency calls
C. Revoking the user certificates used for VPN and Wi-Fi access
D. Using geolocation to find the device
E. Performing cryptographic obfuscation
正解：A
解説: (Topexam メンバーにのみ表示されます)