Free CompTIA CAS-003 Exam Dumps Questions & Answers

A security analyst is reviewing logs and discovers that a company-owned computer issued to an employee is generating many alerts and analyst continues to review the log events and discovers that a non-company-owned device from a different, unknown IP address is general same events. The analyst informs the manager of these finding, and the manager explains that these activities are already known and . . . ongoing simulation. Given this scenario, which of the following roles are the analyst, the employee, and the manager fillings?

• A.  The analyst is red team
  The employee is blue team
  The manager is white team
• B.  The analyst is red team
  The employee is white team
  The manager is blue team
• C.  The analyst is white team
  The employee is red team
  The manager is blue team
• D.  The analyst is blue team
  The employee is red team
  The manager is white team

A remote user reports the inability to authenticate to the VPN concentrator. During troubleshooting, a security administrate captures an attempted authentication and discovers the following being presented by the user's VPN client:

Which of the following BEST describes the reason the user is unable to connect to the VPN service?

• A.  The user's certificate is not signed by the VPN service provider
• B.  The user's certificate was not created for VPN use
• C.  The user's certificate was created using insecure encryption algorithms
• D.  The user's certificate has been compromised and should be revoked.

A small company needs to reduce its operating costs. vendors have proposed solutions, which all focus on management of the company's website and services. The Chief information Security Officer (CISO) insist all available resources in the proposal must be dedicated, but managing a private cloud is not an option. Which of the following is the BEST solution for this company?

• A.  Multinency SaaS
• B.  Single-tenancy SaaS
• C.  Community cloud service model
• D.  On-premises cloud service model

An infrastructure team within an energy organization is at the end of a procurement process and has selected a vendor's SaaS platform to deliver services. As part of the legal negotiation, there are a number of outstanding risks, including:
There are clauses that confirm a data retention period in line with what is in the energy organization's security policy.
The data will be hosted and managed outside of the energy organization's geographical location.
The number of users accessing the system will be small, and no sensitive data will be hosted in the SaaS platform. Which of the following should the project's security consultant recommend as the NEXT step?

• A.  Require a solution owner within the energy organization to accept the identified risks and consequences.
• B.  Mititgate the risks by asking the vendor to accept the in-country privacy principles and modify the retention period.
• C.  Review the procurement process to determine the lessons learned in relation to discovering risks toward the end of the process.
• D.  Develop a security exemption, as the solution does not meet the security policies of the energy organization.

Following a recent security incident on a web server the security analyst takes HTTP traffic captures for further investigation The analyst suspects certain jpg files have important data hidden within them. Which of the following tools will help get all the pictures from within the HTTP traffic captured to a specified folder?

• A.  dd
• B.  memdump
• C.  tshark
• D.  nbtstat