QUESTION: 61

An organization recently experienced a ransomware attack. The security team leader is concerned about the attack reoccurring. However, no further security measures have been implemented.
Which of the following processes can be used to identify potential prevention recommendations?

Detection
Remediation
Preparation
Recovery

Answer(s): C

Reveal Solution Next Question

QUESTION: 62

Some end users of an e-commerce website are reporting a delay when browsing pages. The website uses TLS 1.2. A security architect for the website troubleshoots by connecting from home to the website and capturing traffic via Wireshark. The security architect finds that the issue is the time required to validate the certificate. Which of the following solutions should the security architect recommend?

Adding more nodes to the web server clusters
Changing the cipher algorithm used on the web server
Implementing OCSP stapling on the server
Upgrading to TLS 1.3

Answer(s): C

Reveal Solution Next Question

QUESTION: 63

A security engineer was auditing an organization's current software development practice and discovered that multiple open-source libraries were Integrated into the organization's software. The organization currently performs SAST and DAST on the software it develops.
Which of the following should the organization incorporate into the SDLC to ensure the security of the open-source libraries?

Perform additional SAST/DAST on the open-source libraries.
Implement the SDLC security guidelines.
Track the library versions and monitor the CVE website for related vulnerabilities.
Perform unit testing of the open-source libraries.

Answer(s): C

Reference:

https://www.whitesourcesoftware.com/resources/blog/application-security-best-practices/

Reveal Solution Next Question

QUESTION: 64

A security analyst is investigating a possible buffer overflow attack. The following output was found on a user's workstation: graphic.linux_randomization.prg
Which of the following technologies would mitigate the manipulation of memory segments?

NX bit
ASLR
DEP
HSM

Answer(s): B

Reference:

http://webpages.eng.wayne.edu/~fy8421/19sp-csc5290/labs/lab2-instruction.pdf
(3)

Reveal Solution Next Question

Free CAS-004 Exam Braindumps (page: 17)

QUESTION: 61

QUESTION: 62

QUESTION: 63

Reference:

QUESTION: 64

Reference:

CAS-004 Exam Discussions & Posts