QUESTION: 213

An auditor needs to scan documents at rest for sensitive text. These documents contain both text and images.
Which of the following software functionalities must be enabled in the DLP solution for the auditor to be able to fully read these documents? (Choose two.)

Document interpolation
Regular expression pattern matching
Optical character recognition functionality
Baseline image matching
Advanced rasterization
Watermarking

Answer(s): B,C

Reveal Solution Next Question

QUESTION: 214

A security analyst is performing a review of a web application. During testing as a standard user, the following error log appears:
Which of the following BEST describes the analyst's findings and a potential mitigation technique?

The findings indicate unsecure references. All potential user input needs to be properly sanitized.
The findings indicate unsecure protocols All cookies should be marked as HttpOnly.
The findings indicate information disclosure. The displayed error message should be modified.
The findings indicate a SQL injection. The database needs to be upgraded.

Answer(s): C

Reveal Solution Next Question

QUESTION: 215

A local university that has a global footprint is undertaking a complete overhaul of its website and associated systems Some of the requirements are:
• Handle an increase in customer demand of resources
• Provide quick and easy access to information
• Provide high-quality streaming media
• Create a user-friendly interface
Which of the following actions should be taken FIRST?

Deploy high-availability web servers.
Enhance network access controls.
Implement a content delivery network.
Migrate to a virtualized environment.

Answer(s): C

Reveal Solution Next Question

QUESTION: 216

In order to save money, a company has moved its data to the cloud with a low-cost provider. The company did not perform a security review prior to the move; however, the company requires all of its data to be stored within the country where the headquarters is located. A new employee on the security team has been asked to evaluate the current provider against the most important requirements. The current cloud provider that the company is using offers:
• Only multitenant cloud hosting
• Minimal physical security
• Few access controls
• No access to the data center
The following information has been uncovered:
• The company is located in a known floodplain. which flooded last year.
• Government regulations require data to be stored within the country.
Which of the following should be addressed FIRST?

Update the disaster recovery plan to account for natural disasters.
Establish a new memorandum of understanding with the cloud provider.
Establish a new service-level agreement with the cloud provider.
Provision services according to the appropriate legal requirements.

Answer(s): D

Reveal Solution Next Question

Free CAS-004 Exam Braindumps (page: 54)

QUESTION: 213

QUESTION: 214

QUESTION: 215

QUESTION: 216