CompTIA
Checkpoint
ISC
HP
Dell
EC-Council
EXIN
Fortinet
ITIL®
Juniper
PMI
Microsoft
VMware
Avaya
Google
Salesforce
Amazon
Palo Alto Networks
Certiport
ISC2
All Vendors
  2. Home
  3. Exams
  4. CompTIA
  5. CAS-004

Free CAS-004 Exam Braindumps (page: 22)

Page 22 of 159
PDF with 645 Questions

An enterprise is deploying APIs that utilize a private key and a public key to ensure the connection string is protected. To connect to the API, customers must use the private key.
Which of the following would BEST secure the REST API connection to the database while preventing the use of a hard-coded string in the request string?

  1. Implement a VPN for all APIs.
  2. Sign the key with DSA.
  3. Deploy MFA for the service accounts.
  4. Utilize HMAC for the keys.

Answer(s): D


Reference:

https://eclipsesource.com/blogs/2016/07/06/keyed-hash-message-authentication-code-in-rest-apis/



An application server was recently upgraded to prefer TLS 1.3, and now users are unable to connect their clients to the server. Attempts to reproduce the error are confirmed, and clients are reporting the following:
ERR_SSL_VERSION_OR_CIPHER_MISMATCH
Which of the following is MOST likely the root cause?

  1. The client application is testing PFS.
  2. The client application is configured to use ECDHE.
  3. The client application is configured to use RC4.
  4. The client application is configured to use AES-256 in GCM.

Answer(s): C


Reference:

https://kinsta.com/knowledgebase/err_ssl_version_or_cipher_mismatch/



An organization is designing a network architecture that must meet the following requirements:
-Users will only be able to access predefined services.
-Each user will have a unique allow list defined for access.
-The system will construct one-to-one subject/object access paths dynamically.
Which of the following architectural designs should the organization use to meet these requirements?

  1. Peer-to-peer secure communications enabled by mobile applications
  2. Proxied application data connections enabled by API gateways
  3. Microsegmentation enabled by software-defined networking
  4. VLANs enabled by network infrastructure devices

Answer(s): C



An organization developed a social media application that is used by customers in multiple remote geographic locations around the world. The organization's headquarters and only datacenter are located in New York City. The Chief Information Security Officer wants to ensure the following requirements are met for the social media application:
-Low latency for all mobile users to improve the users' experience
-SSL offloading to improve web server performance
-Protection against DoS and DDoS attacks
-High availability
Which of the following should the organization implement to BEST ensure all requirements are met?

  1. A cache server farm in its datacenter
  2. A load-balanced group of reverse proxy servers with SSL acceleration
  3. A CDN with the origin set to its datacenter
  4. Dual gigabit-speed Internet connections with managed DDoS prevention

Answer(s): C






Post your Comments and Discuss CompTIA CAS-004 exam with other Community members:

CAS-004 Exam Discussions & Posts