QUESTION: 53

A company is implementing SSL inspection. During the next six months, multiple web applications that will be separated out with subdomains will be deployed.
Which of the following will allow the inspection of the data without multiple certificate deployments?

Include all available cipher suites.
Create a wildcard certificate.
Use a third-party CA.
Implement certificate pinning.

Answer(s): B

Reveal Solution Next Question

QUESTION: 54

A small business requires a low-cost approach to theft detection for the audio recordings it produces and sells.
Which of the following techniques will MOST likely meet the business's needs?

Performing deep-packet inspection of all digital audio files
Adding identifying filesystem metadata to the digital audio files
Implementing steganography
Purchasing and installing a DRM suite

Answer(s): C

Reference:

https://portswigger.net/daily-swig/what-is-steganography-a-complete-guide-to-the-ancient-art-of-concealing-messages

Reveal Solution Next Question

QUESTION: 55

Clients are reporting slowness when attempting to access a series of load-balanced APIs that do not require authentication. The servers that host the APIs are showing heavy CPU utilization. No alerts are found on the WAFs sitting in front of the APIs.
Which of the following should a security engineer recommend to BEST remedy the performance issues in a timely manner?

Implement rate limiting on the API.
Implement geoblocking on the WAF.
Implement OAuth 2.0 on the API.
Implement input validation on the API.

Answer(s): A

Reveal Solution Next Question

QUESTION: 56

An organization is considering a BYOD standard to support remote working. The first iteration of the solution will utilize only approved collaboration applications and the ability to move corporate data between those applications. The security team has concerns about the following:
-Unstructured data being exfiltrated after an employee leaves the organization
-Data being exfiltrated as a result of compromised credentials
-Sensitive information in emails being exfiltrated
Which of the following solutions should the security team implement to mitigate the risk of data loss?

Mobile device management, remote wipe, and data loss detection
Conditional access, DoH, and full disk encryption
Mobile application management, MFA, and DRM
Certificates, DLP, and geofencing

Answer(s): C

Reveal Solution Next Question

Free CAS-004 Exam Braindumps (page: 15)

QUESTION: 53

QUESTION: 54

Reference:

QUESTION: 55

QUESTION: 56

CAS-004 Exam Discussions & Posts