QUESTION: 105

An organization enables BYOD but wants to allow users to access the corporate email, calendar, and contacts from their devices. The data associated with the user’s accounts is sensitive, and therefore, the organization wants to comply with the following requirements:

-Active full-device encryption
-Enabled remote-device wipe
-Blocking unsigned applications
-Containerization of email, calendar, and contacts

Which of the following technical controls would BEST protect the data from attack or loss and meet the above requirements?

Require frequent password changes and disable NFC.
Enforce device encryption and activate MAM.
Install a mobile antivirus application.
Configure and monitor devices with an MDM.

Answer(s): D

Reveal Solution Next Question

QUESTION: 106

Given the following information about a company’s internal network:

User IP space: 192.168.1.0/24
Server IP space: 192.168.192.0/25

A security engineer has been told that there are rogue websites hosted outside of the proper server space, and those websites need to be identified.

Which of the following should the engineer do?

Use a protocol analyzer on 192.168.1.0/24
Use a port scanner on 192.168.1.0/24
Use an HTTP interceptor on 192.168.1.0/24
Use a port scanner on 192.168.192.0/25
Use a protocol analyzer on 192.168.192.0/25
Use an HTTP interceptor on 192.168.192.0/25

Answer(s): B

Reveal Solution Next Question

QUESTION: 107

The Chief Information Officer (CIO) wants to increase security and accessibility among the organization’s cloud SaaS applications. The applications are configured to use passwords, and two-factor authentication is not provided natively.

Which of the following would BEST address the CIO’s concerns?

Procure a password manager for the employees to use with the cloud applications.
Create a VPN tunnel between the on-premises environment and the cloud providers.
Deploy applications internally and migrate away from SaaS applications.
Implement an IdP that supports SAML and time-based, one-time passwords.

Answer(s): D

Reveal Solution Next Question

QUESTION: 108

During a security assessment, activities were divided into two phases: internal and external exploitation. The security assessment team set a hard time limit on external activities before moving to a compromised box within the enterprise perimeter.

Which of the following methods is the assessment team most likely to employ NEXT?

Pivoting from the compromised, moving laterally through the enterprise, and trying to exfiltrate data and compromise devices.
Conducting a social engineering attack attempt with the goal of accessing the compromised box physically.
Exfiltrating network scans from the compromised box as a precursor to social media reconnaissance
Open-source intelligence gathering to identify the network perimeter and scope to enable further system compromises.

Answer(s): A

Reveal Solution Next Question

Free CAS-003 Exam Braindumps (page: 27)

QUESTION: 105

QUESTION: 106

QUESTION: 107

QUESTION: 108