QUESTION: 313

After the latest risk assessment, the Chief Information Security Officer (CISO) decides to meet with the development and security teams to find a way to reduce the security task workload. The CISO would like to:
• Have a solution that uses API to communicate with other security tools.
• Use the latest technology possible.
• Have the highest controls possible on the solution.
Which of following is the BEST option to meet these requirements?

EDR
CSP
SOAR
CASB

Answer(s): C

Reveal Solution Next Question

QUESTION: 314

SIMULATION
A security engineer needs to review the configurations of several devices on the network to meet the following requirements:
• The PostgreSQL server must only allow connectivity in the 10.1.2.0/24 subnet.
• The SSH daemon on the database server must be configured to listen to port 4022.
• The SSH daemon must only accept connections from a single workstation.
• All host-based firewalls must be disabled on all workstations.
• All devices must have the latest updates from within the past eight days.
• All HDDs must be configured to secure data at rest.
• Cleartext services are not allowed.
• All devices must be hardened when possible.
INSTRUCTIONS
Click on the various workstations and network devices to review the posture assessment results. Remediate any possible issues or indicate that no issue is found.
Click on Server A to review output data. Select commands in the appropriate tab to remediate connectivity problems to the PostgreSQL database via SSH.
If at any time you would like to bring back the initial state of the simulation, please click the Reset All button.

See Explanation section for answer.

Answer(s): A

Explanation:

Reveal Solution Next Question

QUESTION: 315

A new, online file hosting service is being offered. The service has the following security requirements:
• Threats to customer data integrity and availability should be remediated first.
• The environment should be dynamic to match increasing customer demands.
• The solution should not interfere with customers’ ability to access their data at anytime.
• Security analysts should focus on high-risk items.
Which of the following would BEST satisfy the requirements?

Expanding the use of IPS and NGFW devices throughout the environment
Increasing the number of analysts to identify risks that need remediation
Implementing a SOAR solution to address known threats
Integrating enterprise threat feeds in the existing SIEM

Answer(s): C

Reveal Solution Next Question

QUESTION: 316

Due to internal resource constraints, the management team has asked the principal security architect to recommend a solution that shifts most of the responsibility for application-level controls to the cloud provider. In the shared responsibility model, which of the following levels of service meets this requirement?

IaaS
SaaS
FaaS
PaaS

Answer(s): B

Reveal Solution Next Question

Free CAS-004 Exam Braindumps (page: 79)

QUESTION: 313

QUESTION: 314

Explanation:

QUESTION: 315

QUESTION: 316