最新的CompTIA SecurityX Certification - CAS-005免費考試真題
問題1
SIMULATION
An organization is planning for disaster recovery and continuity of operations.
INSTRUCTIONS
Review the following scenarios and instructions. Match each relevant finding to the affected host.
After associating scenario 3 with the appropriate host(s), click the host to select the appropriate corrective action for that finding.
Each finding may be used more than once.
If at any time you would like to bring back the initial state of the simulation, please click the Reset All button.
An organization is planning for disaster recovery and continuity of operations.
INSTRUCTIONS
Review the following scenarios and instructions. Match each relevant finding to the affected host.
After associating scenario 3 with the appropriate host(s), click the host to select the appropriate corrective action for that finding.
Each finding may be used more than once.
If at any time you would like to bring back the initial state of the simulation, please click the Reset All button.
正確答案:
Explanation:
Given that there is little connection between the two clouds when site A is down and cause an evacuation I would say directory server is damaged causing domain issues. 1 - Directory Server.
SCADA system controls the pumps so 2 - SCADA. Last is route flapping that is VPN concentrator, now dont make the mistake i did put 3 in site B not A as for the added option used the BGP routing, if bgp route is set to go through site A that might cause issues so 3 - VPM Concentrator (Site B) (BGP route option).
問題2
An organization purchased a new manufacturing facility and the security administrator needs to:
- Implement security monitoring.
- Protect any non-traditional device(s)/network(s).
- Ensure no downtime for critical systems.
Which of the following strategies best meets these requirements?
- Implement security monitoring.
- Protect any non-traditional device(s)/network(s).
- Ensure no downtime for critical systems.
Which of the following strategies best meets these requirements?
正確答案: A
說明：（僅 VCESoft 成員可見）
問題3
Which of the following utilizes policies that route packets to ensure only specific types of traffic are being sent to the correct destination based on application usage?
正確答案: B
說明：（僅 VCESoft 成員可見）
問題4
A security analyst needs to ensure email domains that send phishing attempts without previous communications are not delivered to mailboxes. The following email headers are being reviewed:
Which of the following is the best action for the security analyst to take?
Which of the following is the best action for the security analyst to take?
正確答案: D
說明：（僅 VCESoft 成員可見）
問題5
A systems administrator needs to address risks associated with corporate brand impersonation via email. The systems administrator wants a method that permits recipient servers to validate the source authenticity of emails received. Which of the following is the most appropriate?
正確答案: B
問題6
A company's headquarters is in an area with a high rate of severe weather. An engineer must update the enterprise architecture to meet the following requirements:
- Critical services must remain functional without downtime.
- Backups of data and configurations must be securely implemented.
- Company workstations must be highly available and remotely reachable.
Which of the following solutions is the best way to meet these requirements?
- Critical services must remain functional without downtime.
- Backups of data and configurations must be securely implemented.
- Company workstations must be highly available and remotely reachable.
Which of the following solutions is the best way to meet these requirements?
正確答案: C
說明：（僅 VCESoft 成員可見）
問題7
A company undergoing digital transformation is reviewing the resiliency of a CSP and is concerned about meeting SLA requirements in the event of a CSP incident. Which of the following would be best to proceed with the transformation?
正確答案: D
問題8
A security analyst wants to use lessons learned from a prior incident response to reduce dwell time in the future. The analyst is using the following data points:
Which of the following would the analyst most likely recommend?
Which of the following would the analyst most likely recommend?
正確答案: B
說明：（僅 VCESoft 成員可見）
問題9
SIMULATION
A product development team has submitted code snippets for review prior to release.
INSTRUCTIONS
Analyze the code snippets, and then select one vulnerability, and one fix for each code snippet.
If at any time you would like to bring back the initial state of the simulation, please click the Reset All button.
Code Snippet 1
Code Snippet 2
A product development team has submitted code snippets for review prior to release.
INSTRUCTIONS
Analyze the code snippets, and then select one vulnerability, and one fix for each code snippet.
If at any time you would like to bring back the initial state of the simulation, please click the Reset All button.
Code Snippet 1
Code Snippet 2
正確答案:
問題10
A company's security policy states that any publicly available server must be patched within 12 hours after a patch is released. A recent IIS zero-day vulnerability was discovered that affects all versions of the Windows Server OS:
Which of the following hosts should a security analyst patch first once a patch is available?
Which of the following hosts should a security analyst patch first once a patch is available?
正確答案: C
說明：（僅 VCESoft 成員可見）
問題11
An organization is developing an AI-enabled digital worker to help employees complete common tasks, such as template development, editing, research, and scheduling. As part of the AI workload, the organization wants to implement guardrails within the platform. Which of the following should the company do to secure the AI environment?
正確答案: A
說明：（僅 VCESoft 成員可見）
