Free CAS-003 Exam Braindumps (page: 14)

Page 14 of 137

An organization is preparing to develop a business continuity plan. The organization is required to meet regulatory requirements relating to confidentiality and availability, which are well-defined. Management has expressed concern following initial meetings that the organization is not fully aware of the requirements associated with the regulations. Which of the following would be MOST appropriate for the project manager to solicit additional resources for during this phase of the project?

  1. After-action reports
  2. Gap assessment
  3. Security requirements traceability matrix
  4. Business impact assessment
  5. Risk analysis

Answer(s): B



A SaaS-based email service provider often receives reports from legitimate customers that their IP netblocks are on blacklists and they cannot send email. The SaaS has confirmed that affected customers typically have IP addresses within broader network ranges and some abusive customers within the same IP ranges may have performed spam campaigns. Which of the following actions should the SaaS provider perform to minimize legitimate customer impact?

  1. Inform the customer that the service provider does not have any control over third-party blacklist entries. The customer should reach out to the blacklist operator directly
  2. Perform a takedown of any customer accounts that have entries on email blacklists because this is a strong indicator of hostile behavior
  3. Work with the legal department and threaten legal action against the blacklist operator if the netblocks are not removed because this is affecting legitimate traffic
  4. Establish relationship with a blacklist operators so broad entries can be replaced with more granular entries and incorrect entries can be quickly pruned

Answer(s): D



An agency has implemented a data retention policy that requires tagging data according to type before storing it in the data repository. The policy requires all business emails be automatically deleted after two years. During an open records investigation, information was found on an employee’s work computer concerning a conversation that occurred three years prior and proved damaging to the agency’s reputation. Which of the following MOST likely caused the data leak?

  1. The employee manually changed the email client retention settings to prevent deletion of emails
  2. The file that contained the damaging information was mistagged and retained on the server for longer than it should have been
  3. The email was encrypted and an exception was put in place via the data classification application
  4. The employee saved a file on the computer’s hard drive that contained archives of emails, which were more than two years old

Answer(s): D



A forensics analyst suspects that a breach has occurred. Security logs show the company’s OS patch system may be compromised, and it is serving patches that contain a zero-day exploit and backdoor. The analyst extracts an executable file from a packet capture of communication between a client computer and the patch server. Which of the following should the analyst use to confirm this suspicion?

  1. File size
  2. Digital signature
  3. Checksums
  4. Anti-malware software
  5. Sandboxing

Answer(s): B



Page 14 of 137



Post your Comments and Discuss CompTIA CAS-003 exam with other Community members:

Nathan commented on April 20, 2020
I appreicate that you provide the Xengine software for free. But are you planning to keep it free! I really hope so!
GERMANY
upvote