QUESTION: 165

A Chief Information Security Officer (CISO) is concerned that a company's current data disposal procedures could result in data remanence. The company uses only SSDs.
Which of the following would be the MOST secure way to dispose of the SSDs given the CISO's concern?

Degaussing
Overwriting
Shredding
Formatting
Incinerating

Answer(s): C

Reveal Solution Next Question

QUESTION: 166

The CI/CD pipeline requires code to have close to zero defects and zero vulnerabilities. The current process for any code releases into production uses two-week
Agile sprints.
Which of the following would BEST meet the requirement?

An open-source automation server
A static code analyzer
Trusted open-source libraries
A single code repository for all developers

Answer(s): B

Reveal Solution Next Question

QUESTION: 167

A security analyst wants to keep track of all outbound web connections from workstations. The analyst's company uses an on-premises web filtering solution that forwards the outbound traffic to a perimeter firewall.
When the security analyst gets the connection events from the firewall, the source IP of the outbound web traffic is the translated IP of the web filtering solution. Considering this scenario involving source NAT, which of the following would be the BEST option to inject in the HTTP header to include the real source IP from workstations?

X-Forwarded-Proto
X-Forwarded-For
Cache-Control
Strict-Transport-Security
Content-Security-Policy

Answer(s): B

Reveal Solution Next Question

QUESTION: 168

An HVAC contractor requested network connectivity permission to remotely support/troubleshoot equipment issues at a company location. Currently, the company does not have a process that allows vendors remote access to the corporate network.
Which of the following solutions represents the BEST course of action to allow the contractor access?

Add the vendor's equipment to the existing network. Give the vendor access through the standard corporate VPN.
Give the vendor a standard desktop PC to attach the equipment to. Give the vendor access through the standard corporate VPN.
Establish a certification process for the vendor. Allow certified vendors access to the VDI to monitor and maintain the HVAC equipment.
Create a dedicated segment with no access to the corporate network. Implement dedicated VPN hardware for vendor access.

Answer(s): D

Reveal Solution Next Question

Free CAS-004 Exam Braindumps (page: 42)

QUESTION: 165

QUESTION: 166

QUESTION: 167

QUESTION: 168