Free CompTIA CAS-001 Exam Dumps Questions & Answers

A security administrator wants to verify and improve the security of a business process which is tied to proven company workflow. The security administrator was able to improve security by applying controls that were defined by the newly released company security standard. Such controls included code improvement, transport encryption, and interface restrictions. Which of the following can the security administrator do to further increase security after having exhausted all the technical controls dictated by the company's security standard?

• A.  Conduct a gap analysis and recommend appropriate non-technical mitigating controls, and incorporate the new controls into the standard.
• B.  Modify the company standard to account for higher security and meet with upper management for approval to implement the new standard.
• C.  Modify the company policy to account for higher security, adapt the standard accordingly, and implement new technical controls.
• D.  Conduct a risk analysis on all current controls, and recommend appropriate mechanisms to increase overall security.

In a SPML exchange, which of the following BEST describes the three primary roles?

• A.  The Provisioning Service Target (PST) entity makes the provisioning request, the Provisioning Service Provider (PSP) responds to the PST requests, and the Provisioning Service Target (PST) performs the provisioning.
• B.  The Request Authority (RA) entity makes the provisioning request, the Provisioning Service Target (PST) responds to the RA requests, and the Provisioning Service Provider (PSP) performs the provisioning.
• C.  The Provisioning Service Provider (PSP) entity makes the provisioning request, the Provisioning Service Target (PST) responds to the PSP requests, and the Provisioning Service Provider (PSP) performs the provisioning.
• D.  The Request Authority (RA) entity makes the provisioning request, the Provisioning Service Provider (PSP) responds to the RA requests, and the Provisioning Service Target (PST) performs the provisioning.

As part of the testing phase in the SDLC, a software developer wants to verify that an application is properly handling user error exceptions. Which of the following is the BEST tool or process for the developer use?

• A.  Vulnerability assessment
• B.  SRTM review
• C.  HTTP interceptor
• D.  Fuzzer

A company has received the contract to begin developing a new suite of software tools to replace an aging collaboration solution. The original collaboration solution has been in place for nine years, contains over a million lines of code, and took over two years to develop originally. The SDLC has broken the primary delivery stages into eight different deliverables, with each section requiring an in-depth risk analysis before moving on to the next phase. Which of the following software development methods is MOST applicable?

• A.  Spiral model
• B.  Waterfall model
• C.  Agile model
• D.  Incremental model

The Chief Executive Officer (CEO) of an Internet service provider (ISP) has decided to limit the company's contribution to worldwide Distributed Denial of Service (DDoS) attacks. Which of the following should the ISP implement? (Select TWO).

• A.  Scan the ISP's customer networks using an up-to-date vulnerability scanner.
• B.  Notify customers when services they run are involved in an attack.
• C.  Block traffic from the ISP's networks destined for blacklisted IPs.
• D.  Prevent the ISP's customers from querying DNS servers other than those hosted by the ISP.
• E.  Block traffic with a source IP not allocated to the ISP from exiting the ISP's network.