Question 1

While reviewing recent modem reports, a security officer discovers that several employees were contacted by the same individual who impersonated a recruiter. Which of the following best describes this type of correlation?

Options :

A : Spear-phishing campaign

B : Threat modeling

C : Red team assessment

D : Attack pattern analysis

Answer: A

Question 2

After remote desktop capabilities were deployed in the environment, various vulnerabilities were noticed. • Exfiltration of intellectual property • Unencrypted files • Weak user passwords Which of the following is the best way to mitigate these vulnerabilities? (Select two).

Options :

A : Implementing data loss prevention

B : Deploying file integrity monitoring

C : Restricting access to critical file services only

D : Deploying directory-based group policies

E : Enabling modem authentication that supports MFA

F : Implementing a version control system

G : Implementing a CMDB platform

Answer: A,E

Question 3

Developers have been creating and managing cryptographic material on their personal laptops fix use in production environment. A security engineer needs to initiate a more secure process. Which of the following is the best strategy for the engineer to use?

Options :

A : Disabling the BIOS and moving to UEFI

B : Managing secrets on the vTPM hardware

C : Employing shielding lo prevent LMI

D : Managing key material on a HSM

Answer: D

Question 4

A central bank implements strict risk mitigations for the hardware supply chain, including an allow list for specific countries of origin. Which of the following best describes the cyberthreat to the bank?

Options :

A : Ability to obtain components during wartime

B : Fragility and other availability attacks

C : Physical Implants and tampering

D : Non-conformance to accepted manufacturing standards

Answer: C

Question 5

A security engineer performed a code scan that resulted in many false positives. The security engineer must find a solution that improves the quality of scanning results before application deployment. Which of the following is the best solution?

Options :

A : Limiting the tool to a specific coding language and tuning the rule set

B : Configuring branch protection rules and dependency checks

C : Using an application vulnerability scanner to identify coding flaws in production

D : Performing updates on code libraries before code development

Answer: A

Higher Test Marks with Free Online CAS-005 Exam Practice

Buying Options: