Free CompTIA CAS-001 Exam Dumps Questions & Answers

Company GHI consolidated their network distribution so twelve network VLANs would be available over dual fiber links to a modular L2 switch in each of the company's six IDFs. The IDF modular switches have redundant switch fabrics and power supplies. Which of the following threats will have the GREATEST impact on the network and what is the appropriate remediation step?

• A.Threat: VLAN hopping Remediation: Enable ACLs on the IDF switch
• B.Threat: Bridge loop Remediation: Enable spanning tree
• C.Threat: 802.1q trunking attack Remediation: Enable only necessary VLANs for each port
• D.Threat: VLAN hopping Remediation: Enable only necessary VLANs for each port

A programming team is deploying a new PHP module to be run on a Solaris 10 server with trusted extensions. The server is configured with three zones, a management zone, a customer zone, and a backend zone. The security model is constructed so that only programs in the management zone can communicate data between the zones. After installation of the new PHP module, which handles on-line customer payments, it is not functioning correctly. Which of the following is the MOST likely cause of this problem?

• A.The PHP module was installed in the management zone, but is trying to call a routine in the customer zone to transfer data directly to a MySQL database in the backend zone.
• B.The iptables configuration is not configured correctly to permit zone to zone communications between the customer and backend zones.
• C.The PHP module is written to transfer data from the customer zone to the management zone, and then from the management zone to the backend zone.
• D.The ipfilters configuration is configured to disallow loopback traffic between the physical NICs associated with each zone.

A health service provider is considering the impact of allowing doctors and nurses access to the internal email system from their personal smartphones. The Information Security Officer (ISO) has received a technical document from the security administrator explaining that the current email system is capable of enforcing security policies to personal smartphones, including screen lockout and mandatory PINs. Additionally, the system is able to remotely wipe a phone if reported lost or stolen. Which of the following should the Information Security Officer be MOST concerned with based on this scenario? (Select THREE).

• A.Data usage cost could significantly increase.
• B.Smartphones may be used as rogue access points.
• C.The email system may become unavailable due to overload.
• D.Equipment loss, theft, and data leakage.
• E.Smartphone radios can interfere with health equipment.
• F.Compliance may not be supported by all smartphones.
• G.Not all smartphones natively support encryption.

-
After being informed that the company DNS is unresponsive, the system administrator issues the following command from a Linux workstation:
SSH -p 2020 -l user dnsserver.company.com
Once at the command prompt, the administrator issues the below commanD.
---
Service bind restart
The system returns the below response:
Unable to restart BIND
Which of the following is true about the above situation?

• A.The administrator used the wrong SSH port to restart the DNS server.
• B.The service did not restart because the bind command is privileged.
• C.The administrator must use the sudo command in order to restart the service.
• D.The service was restarted correctly, but it failed to bind to the network interface.

New zero-day attacks are announced on a regular basis against a broad range of technology systems. Which of the following best practices should a security manager do to manage the risks of these attack vectors? (Select TWO).

• A.Create an inventory of applications.
• B.Establish an emergency response call tree.
• C.Update all network diagrams.
• D.Backup the router and firewall configurations.
• E.Maintain a list of critical systems.