Free CompTIA CAS-005 Exam Dumps Questions & Answers

A company ' s SICM Is continuously reporting false positives and false negatives The security operations team has Implemented configuration changes to troubleshoot possible reporting errors Which of the following sources of information best supports the required analysts process? (Select two).

• A.Manual review processes
• B.Alert failures
• C.Third-party reports and logs
• D.Dashboards
• E.Trends
• F.Network traffic summaries

A SOC analyst is investigating an event in which a penetration tester was able to successfully create and execute a payload. The analyst pulls the following command history from the affected server-

Which of the following should the analyst implement lo improve the security of the server?

• A.EDR signatures that terminate specific processes
• B.Application controls with allow lists
• C.OS restrictions of globally writable folders
• D.Kernel-supported ASLR controls

A company migrating to aremote work model requires that company-owned devices connect to a VPN before logging in to the device itself. The VPN gateway requires that a specific key extension is deployed to the machine certificates in the internal PKI. Which of the following best explains this requirement?

• A.The certificate is an additional factor to meet regulatory MFA requirements for VPN access.
• B.The internal PKI certificate deployment allows for Wi-Fi connectivity before logging in to other systems.
• C.The server connection uses SSL VPN, which uses certificates for secure communication.
• D.The VPN client selected the certificate with the correct key usage without user interaction.

An organization wants to create a threat model to identity vulnerabilities in its infrastructure. Which of the following, should be prioritized first?

• A.External facing Infrastructure with a low risk score and no known exploited vulnerabilities
• B.External-facing Infrastructure with known exploited vulnerabilities
• C.Internal infrastructure with high-seventy and Known exploited vulnerabilities
• D.External-facing infrastructure with a high risk score that can only be exploited with local access to the resource

A game developer wants to reach new markets and is advised by legal counsel to include specific age-related sign-up requirements. Which of the following best describes the legal counsel ' s concerns?

• A.PCI DSS
• B.GDPR
• C.LGPD
• D.COPPA