QUESTION: 217

A security administrator needs to implement an X.509 solution for multiple sites within the human resources department. This solution would need to secure all subdomains associated with the domain name of the main human resources web server.
Which of the following would need to be implemented to properly secure the sites and provide easier private key management?

Certificate revocation list
Digital signature
Wildcard certificate
Registration authority
Certificate pinning

Answer(s): C

Reveal Solution Next Question

QUESTION: 218

An organization’s threat team is creating a model based on a number of incidents in which systems in an air-gapped location are compromised. Physical access to the location and logical access to the systems are limited to administrators and select, approved, on-site company employees.
Which of the following is the BEST strategy to reduce the risks of data exposure?

NDAs
Mandatory access control
NIPS
Security awareness training

Answer(s): D

Reveal Solution Next Question

QUESTION: 219

An organization is establishing a new software assurance program to vet applications before they are introduced into the production environment. Unfortunately, many of the applications are provided only as compiled binaries.
Which of the following should the organization use to analyze these applications? (Choose two.)

Regression testing
SAST
Third-party dependency management
IDE SAST
Fuzz testing
IAST

Answer(s): E,F

Reveal Solution Next Question

QUESTION: 220

Which of the following agreements includes no penalties and can be signed by two entities that are working together toward the same goal?

Answer(s): A

Reveal Solution Next Question

Free CAS-004 Exam Braindumps (page: 55)

QUESTION: 217

QUESTION: 218

QUESTION: 219

QUESTION: 220