Free CompTIA CAS-004 Exam Dumps Questions & Answers

Which of the following processes involves searching and collecting evidence during an investigation or lawsuit?

• A.Review analysis
• B.Information governance
• C.Chain of custody
• D.E-discovery

A security engineer is working for a service provider and analyzing logs and reports from a new EDR solution, which is installed on a small group of workstations. Later that day, another security engineer receives an email from two developers reporting the software being used for development activities is now blocked. The developers have not made any changes to the software being used. Which of the following is the EDR reporting?

• A.True negative
• B.False negative
• C.True positive
• D.False positive

A security architect is given the following requirements to secure a rapidly changing enterprise with an increasingly distributed and remote workforce
* Cloud-delivered services
* Full network security stack
* SaaS application security management
* Minimal latency for an optimal user experience
* Integration with the cloud 1AM platform
Which of the following is the BEST solution?

• A.Routing and Remote Access Service (RRAS)
• B.NGFW
• C.Managed Security Service Provider (MSSP)
• D.SASE

After a cybersecurity incident, a judge found that a company did not conduct a proper forensic investigation.
The company was ordered to pay penalties. Which of the following forensic steps would be best to prevent this from happening again?

• A.Evidence analysis
• B.Evidence preservation
• C.Evidence verification
• D.Evidence collection

During the development process, the team identifies major components that need to be rewritten. As a result, the company hires a security consultant to help address major process issues. Which of the following should the consultant recommend to best prevent these issues from reoccurring in the future?

• A.Configuring a dynamic application security testing tool
• B.Setting up an interactive application security testing tool
• C.Implementing a static analysis tool within the CI/CD system
• D.Utilizing a risk-based threat modeling approach on new projects
• E.Performing software composition analysis on all third-party components