Free Access to CompTIA.CAS-004.v2023-09-28.q156 with Valid Practice Test (Page 10)

Question 41

Which of the following BEST describes a common use case for homomorphic encryption ?

A.Processing data on a server after decrypting in order to prevent unauthorized access in transit
B.Maintaining the confidentiality of data both at rest and in transit to and from a CSP for processing
C.Transmitting confidential data to a CSP for processing on a large number of resources without revealing information
D.Storing proprietary data across multiple nodes in a private cloud to prevent access by unauthenticated users

Correct Answer: C

A) Processing data on a server after decrypting in order to prevent unauthorized access in transit is not a common use case for homomorphic encryption, because it does not take advantage of the main feature of homomorphic encryption, which is computing over encrypted data. This use case can be achieved by using any standard encryption method that provides confidentiality for data in transit.
B) Maintaining the confidentiality of data both at rest and in transit to and from a CSP for processing is not a common use case for homomorphic encryption, because it does not take advantage of the main feature of homomorphic encryption, which is computing over encrypted data. This use case can be achieved by using any standard encryption method that provides confidentiality for data at rest and in transit.
D) Storing proprietary data across multiple nodes in a private cloud to prevent access by unauthenticated users is not a common use case for homomorphic encryption, because it does not involve any computation over encrypted data. This use case can be achieved by using any standard encryption method that provides confidentiality for data at rest.
https://www.splunk.com/en_us/blog/learn/homomorphic-encryption.html
https://research.aimultiple.com/homomorphic-encryption/
Explanation:
Homomorphic encryption is a type of encryption method that allows computations to be performed on encrypted data without first decrypting it with a secret key. The results of the computations also remain encrypted and can only be decrypted by the owner of the private key. Homomorphic encryption can be used for privacy-preserving outsourced storage and computation. This means that data can be encrypted and sent to a cloud service provider (CSP) for processing, without revealing any information to the CSP or anyone else who might intercept the data. Homomorphic encryption can enable new services and applications that require processing confidential data on a large number of resources, such as machine learning, data analytics, health care, finance, and voting.

Question 42

Due to adverse events, a medium-sized corporation suffered a major operational disruption that caused its servers to crash and experience a major power outage. Which of the following should be created to prevent this type of issue in the future?

A.SLA
B.BIA
C.BCM
D.BCP
E.RTO

Question 43

Which of the following is the BEST disaster recovery solution when resources are running in a cloud environment?

A.Remote provider BCDR
B.Cloud provider BCDR
C.Alternative provider BCDR
D.Primary provider BCDR

Question 44

A health company has reached the physical and computing capabilities in its datacenter, but the computing demand continues to increase. The infrastructure is fully virtualized and runs custom and commercial healthcare application that process sensitive health and payment information. Which of the following should the company implement to ensure it can meet the computing demand while complying with healthcare standard for virtualization and cloud computing?

A.Hybrid IaaS solution in a single-tenancy cloud
B.Pass solution in a multinency cloud
C.SaaS solution in a community cloud
D.Private SaaS solution in a single tenancy cloud.

Question 45

A company suspects a web server may have been infiltrated by a rival corporation. The security engineer reviews the web server logs and finds the following:

The security engineer looks at the code with a developer, and they determine the log entry is created when the following line is run:

Which of the following is an appropriate security control the company should implement?

A.Use server-side processing to avoid XSS vulnerabilities in path input.
B.Separate the items in the system call to prevent command injection.
C.Restrict directory permission to read-only access.
D.Parameterize a query in the path variable to prevent SQL injection.

Question 41

Question 42

Question 43

Question 44

Question 45

Download PDF File