QUESTION: 265

A new mandate by the corporate security team requires that all endpoints must meet a security baseline before accessing the corporate network. All servers and desktop computers are scanned by the dedicated internal scanner appliance installed in each subnet. However, remote worker laptops do not access the network regularly.
Which of the following is the BEST option for the security team to ensure remote worker laptops are scanned before being granted access to the corporate network?

Implement network access control to perform host validation of installed patches.
Create an 802.1X implementation with certificate-based device identification.
Create a vulnerability scanning subnet for remote workers to connect to on the network at headquarters.
Install a vulnerability scanning agent on each remote laptop to submit scan data.

Answer(s): A

Reveal Solution Next Question

QUESTION: 266

A penetration tester is testing a company’s login form for a web application using a list of known usernames and a common password list. According to a brute-force utility, the penetration tester needs to provide the tool with the proper headers, POST URL with variable names, and the error string returned with an improper login.
Which of the following would BEST help the tester to gather this information? (Choose two.)

The new source feature of the web browser
The logs from the web server
The inspect feature from the web browser
A tcpdump from the web server
An HTTP interceptor
The website certificate viewed via the web browser

Answer(s): C,E

Reveal Solution Next Question

QUESTION: 267

A security analyst has concerns about malware on an endpoint. The malware is unable to detonate by modifying the kernel response to various system calls. As a test, the analyst modifies a Windows server to respond to system calls as if it was a Linux server. In another test, the analyst modifies the operating system to prevent the malware from identifying target files.
Which of the following techniques is the analyst MOST likely using?

Honeypot
Deception
Simulators
Sandboxing

Answer(s): B

Reveal Solution Next Question

QUESTION: 268

Users are claiming that a web server is not accessible. A security engineer is unable to view the Internet Services logs for the site. The engineer connects to the server and runs netstat – an and receives the following output:
Which of the following is MOST likely happening to the server?

Port scanning
ARP spoofing
Buffer overflow
Denial of service

Answer(s): D

Reveal Solution Next Question

Free CAS-004 Exam Braindumps (page: 67)

QUESTION: 265

QUESTION: 266

QUESTION: 267

QUESTION: 268