Free CompTIA CAS-001 Exam Dumps Questions & Answers

- ---
Company XYZ has just purchased Company ABC through a new acquisition. A business decision has been made to integrate the two company's networks, application, and several basic services.
The initial integration of the two companies has specified the following requirements:
Company XYZ requires access to the web intranet, file, print, secure FTP server, and authentication domain resources Company XYZ is being on boarded into Company ABC's authentication domain Company XYZ is considered partially trusted Company XYZ does not want performance issues when accessing ABC's systems
Which of the following network security solutions will BEST meet the above requirements?

• A.  Require Company XYZ to manage the router ACLs, controlling access to Company ABC resources, but with Company ABC approving the change control to the ACLs. Open up Company ABC's business partner firewall to permit access to Company ABC's file, print, secure FTP server, authentication servers and web intranet access.
• B.  Place file, print, secure FTP server and authentication domain servers at Company XYZ's hub site. Open up Company ABC's business partner firewall to permit access to ABC's web intranet access and other required services.
• C.  Place a Company ABC managed firewall in Company XYZ's hub site; then place Company ABC's file, print, authentication, and secure FTP servers in a zone off the firewall. Ensure that Company ABC's business partner firewalls are opened up for web intranet access and other required services.
• D.  Place no restrictions on internal network connectivity between Company XYZ and Company AB Open up Company ABC's business partner firewall to permit access to Company ABC's file, print, secure FTP server, authentication servers and web intranet access.

An organization has had six security incidents over the past year against their main web application. Each time the organization was able to determine the cause of the incident and restore operations within a few hours to a few days. Which of the following provides the MOST comprehensive method for reducing the time to recover?

• A.  Conduct a loss analysis to determine which systems to focus time and money towards increasing security.
• B.  Develop an incident response team, require training for incident remediation, and provide incident reporting and tracking metrics.
• C.  Implement a knowledge management process accessible to the help desk and finance departments to estimate cost and prioritize remediation.
• D.  Create security metrics that provide information on response times and requirements to determine the best place to focus time and money.

The company is considering issuing non-standard tablet computers to executive management. Which of the following is the FIRST step the security manager should perform?

• A.  Set up an access control system to isolate the devices from the network.
• B.  Develop the use case for the devices and perform a risk analysis.
• C.  Integrate the tablets into standard remote access systems.
• D.  Apply standard security policy settings to the devices.

A security analyst is tasked to create an executive briefing, which explains the activity and motivation of a cyber adversary. Which of the following is the MOST important content for the brief for management personnel to understand?

• A.  Threat actor types, threat actor motivation, and the attack impact
• B.  Threat actor types, attack sophistication, and the anatomy of an attack
• C.  Threat actor types, threat actor motivation, and attack tools
• D.  Unsophisticated agents, organized groups, and nation states

An IT administrator has installed new DNS name servers (Primary and Secondary), which are used to host the company MX records and resolve the web server's public address. In order to secure the zone transfer between the primary and secondary server, the administrator uses only server ACLs. Which of the following attacks could the secondary DNS server still be susceptible to?

• A.  IP spoofing
• B.  DNS replication
• C.  Email spamming
• D.  Clickjacking