Free CompTIA CAS-003 Exam Dumps Questions & Answers

A security engineer is embedded with a development team to ensure security is built into products being developed. The security engineer wants to ensure developers are not blocked by a large number of security requirements applied at specific schedule points. Which of the following solutions BEST meets the engineer's goal?

• A.  Enforce code quality and reuse standards into the requirements definition phase of the waterfall development process.
• B.  Schedule weekly reviews of al unit test results with the entire development team and follow up between meetings with surprise code inspections.
• C.  Deploy an integrated software tool that builds and tests each portion of code committed by developers and provides feedback.
• D.  Develop and implement a set of automated security tests to be installed on each development team leader's workstation.

Users of a newly deployed VoIP solution report multiple instances of dropped or garbled calls. Thirty users connect to the primary site via a site-to-site VPN, and the primary site supplies a dial tone to all satellite locations. The network engineer who installed the equipment copied the configuration from a site that has two users on a low bandwidth DSL connection. Which of the following is MOST likely to restore telephone availability at the 30-user site?

• A.  Enable point-to-point tunneling for all VoIP traffic at the new site
• B.  Prioritize ICMP and TCP traffic over UDP traffic using QoS
• C.  Configure QoS settings to support the larger bandwidth available
• D.  Provision new firewalls at all sites to enable QoS management of VoIP traffic
• E.  Disable Layer 2 encryption on the site-to-site VPNs throughout the company

When of the following is the BEST reason to implement a separation of duties policy?

• A.  It eliminates the need to enforce least privilege by logging all actions.
• B.  it removes barriers to collusion and collaboration between business units.
• C.  It minimizes the risk of Dos due to continuous monitoring.
• D.  It increases the level of difficulty for a single employee to perpetrate fraud.

During the deployment of a new system, the implementation team determines that APIs used to integrate the new system with a legacy system are not functioning properly. Further investigation shows there is a misconfigured encryption algorithm used to secure data transfers between systems. Which of the following should the project manager use to determine the source of the defined algorithm in use?

• A.  Implementation guide
• B.  Data design diagram
• C.  Software development lifecycle
• D.  Roles matrix
• E.  Security requirements traceability matrix
• F.  Code repositories

A recent incident revealed a log entry was modified alter its original creation. Which of the following technologies would BEST ensure end user systems are able to defend against future incidents?

• A.  Implement a blockchain scheme.
• B.  Employ a behavioral HIDS on end user devices.
• C.  Deploy MFA for access to services.
• D.  Use an offline archival server