QUESTION: 81

An enterprise is deploying APIs that utilize a private key and a public key to ensure the connection string is protected. To connect to the API, customers must use the private key.
Which of the following would BEST secure the REST API connection to the database while preventing the use of a hard-coded string in the request string?

Implement a VPN for all APIs.
Sign the key with DSA.
Deploy MFA for the service accounts.
Utilize HMAC for the keys.

Answer(s): D

Reference:

https://eclipsesource.com/blogs/2016/07/06/keyed-hash-message-authentication-code-in-rest-apis/

Reveal Solution Next Question

QUESTION: 82

An application server was recently upgraded to prefer TLS 1.3, and now users are unable to connect their clients to the server. Attempts to reproduce the error are confirmed, and clients are reporting the following:
ERR_SSL_VERSION_OR_CIPHER_MISMATCH
Which of the following is MOST likely the root cause?

The client application is testing PFS.
The client application is configured to use ECDHE.
The client application is configured to use RC4.
The client application is configured to use AES-256 in GCM.

Answer(s): C

Reference:

https://kinsta.com/knowledgebase/err_ssl_version_or_cipher_mismatch/

Reveal Solution Next Question

QUESTION: 83

An organization is designing a network architecture that must meet the following requirements:
-Users will only be able to access predefined services.
-Each user will have a unique allow list defined for access.
-The system will construct one-to-one subject/object access paths dynamically.
Which of the following architectural designs should the organization use to meet these requirements?

Peer-to-peer secure communications enabled by mobile applications
Proxied application data connections enabled by API gateways
Microsegmentation enabled by software-defined networking
VLANs enabled by network infrastructure devices

Answer(s): C

Reveal Solution Next Question

QUESTION: 84

An organization developed a social media application that is used by customers in multiple remote geographic locations around the world. The organization's headquarters and only datacenter are located in New York City. The Chief Information Security Officer wants to ensure the following requirements are met for the social media application:
-Low latency for all mobile users to improve the users' experience
-SSL offloading to improve web server performance
-Protection against DoS and DDoS attacks
-High availability
Which of the following should the organization implement to BEST ensure all requirements are met?

A cache server farm in its datacenter
A load-balanced group of reverse proxy servers with SSL acceleration
A CDN with the origin set to its datacenter
Dual gigabit-speed Internet connections with managed DDoS prevention

Answer(s): C

Reveal Solution Next Question

Free CAS-004 Exam Braindumps (page: 21)

QUESTION: 81

Reference:

QUESTION: 82

Reference:

QUESTION: 83

QUESTION: 84