Free CompTIA CAS-004 Exam Dumps Questions & Answers

To save time, a company that is developing a new VPN solution has decided to use the OpenSSL library within Its proprietary software. Which of the following should the company consider to maximize risk reduction from vulnerabilities introduced by OpenSSL?

• A.Ensure the third-party library implements the TLS and disable weak ciphers.
• B.Include stable, long-term releases of third-party libraries instead of using newer versions.
• C.Implement an ongoing, third-party software and library review and regression testing.
• D.Compile third-party libraries into the main code statically instead of using dynamic loading.

A software developer created an application for a large, multinational company. The company is concerned the program code could be reverse engineered by a foreign entity and intellectual property would be lost.
Which of the following techniques should be used to prevent this situation?

• A.Watermarking
• B.Obfuscation
• C.Digital certificates
• D.Code signing

A security analyst is assessing a new application written in Java. The security analyst must determine which vulnerabilities exist during runtime. Which of the following would provide the most exhaustive list of vulnerabilities while meeting the objective?

• A.Dynamic analysis
• B.Input validation
• C.Side-channel analysis
• D.Fuzz testing
• E.Static analysis

loCs were missed during a recent security incident due to the reliance on a signature-based detection platform.
A security engineer must recommend a solution that can be implemented to address this shortcoming. Which of the following would be the most appropriate recommendation?

• A.UEBA
• B.EAP
• C.FIM
• D.SASE
• E.CSPM

An organization needs to classify its systems and data in accordance with external requirements. Which of the following roles is best qualified to perform this task?

• A.Data processor
• B.Data steward
• C.Data custodian
• D.Systems administrator
• E.Data owner