Free CompTIA CAS-003 Exam Dumps Questions & Answers

A security consultant is improving the physical security of a sensitive site and takes pictures of the unbranded building to include in the report. Two weeks later, the security consultant misplaces the phone, which only has one hour of charge left on it. The person who finds the phone removes the MicroSD card in an attempt to discover the owner to return it.
The person extracts the following data from the phone and EXIF data from some files:
DCIM Images folder
Audio books folder
Torrentz
My TAX.xls
Consultancy HR Manual.doc
Camera: SM-G950F
Exposure time: 1/60s
Location: 3500 Lacey Road USA
Which of the following BEST describes the security problem?

• A.MicroSD in not encrypted and contains geotagging information.
• B.MicroSD in not encrypted and also contains personal data.
• C.MicroSD contains a mixture of personal and work data.
• D.MicroSD contains pirated software and is not encrypted.

Which of the following system would be at the GREATEST risk of compromise if found to have an open vulnerability associated with perfect ... secrecy?

• A.SIEM
• B.Endpoints
• C.Virtual hosts
• D.Layer 2 switches
• E.VPN concentrators

A newly hired security analyst has joined an established SOC team. Not long after going through corporate orientation, a new attack method on web-based applications was publicly revealed. The security analyst immediately brings this new information to the team lead, but the team lead is not concerned about it.
Which of the following is the MOST likely reason for the team lead's position?

• A.The attack type does not meet the organization's threat model.
• B.The organization has accepted the risks associated with web-based threats.
• C.Web-based applications are on isolated network segments.
• D.Corporate policy states that NIPS signatures must be updated every hour.

A company monitors the performance of all web servers using WMI. A network administrator informs the security engineer that web servers hosting the company's client-facing portal are running slowly today. After some investigation, the security engineer notices a large number of attempts at enumerating host information via SNMP from multiple IP addresses.
Which of the following would be the BEST technique for the security engineer to employ in an attempt to prevent reconnaissance activity?

• A.Install a HIPS on the web servers
• B.Disable SNMP on the web servers
• C.Disable inbound traffic from offending sources
• D.Install anti-DDoS protection in the DMZ

The security configuration management policy states that all patches must undergo testing procedures before being moved into production. The sec... analyst notices a single web application server has been downloading and applying patches during non-business hours without testing. There are no apparent adverse reaction, server functionality does not seem to be affected, and no malware was found after a scan. Which of the following action should the analyst take?

• A.Monitor the web application service for abnormal bandwidth consumption.
• B.Reschedule the automated patching to occur during business hours.
• C.Create an incident ticket for anomalous activity.
• D.Monitor the web application for service interruptions caused from the patching.