QUESTION: 105

A security analyst detected a malicious PowerShell attack on a single server. The malware used the Invoke-Expression function to execute an external malicious script. The security analyst scanned the disk with an antivirus application and did not find any IOCs. The security analyst now needs to deploy a protection solution against this type of malware.
Which of the following BEST describes the type of malware the solution should protect against?

Worm
Logic bomb
Fileless
Rootkit

Answer(s): C

Show Answer Next Question

QUESTION: 106

A development team created a mobile application that contacts a company's back-end APIs housed in a PaaS environment. The APIs have been experiencing high processor utilization due to scraping activities. The security engineer needs to recommend a solution that will prevent and remedy the behavior.
Which of the following would BEST safeguard the APIs? (Choose two.)

Bot protection
OAuth 2.0
Input validation
Autoscaling endpoints
Rate limiting
CSRF protection

Answer(s): A,E

Reference:

https://stackoverflow.com/questions/3161548/how-do-i-prevent-site-scraping

Show Answer Next Question

QUESTION: 107

An organization's existing infrastructure includes site-to-site VPNs between datacenters. In the past year, a sophisticated attacker exploited a zero-day vulnerability on the VPN concentrator. Consequently, the Chief Information Security Officer (CISO) is making infrastructure changes to mitigate the risk of service loss should another zero-day exploit be used against the VPN solution.
Which of the following designs would be BEST for the CISO to use?

Adding a second redundant layer of alternate vendor VPN concentrators
Using Base64 encoding within the existing site-to-site VPN connections
Distributing security resources across VPN sites
Implementing IDS services with each VPN concentrator
Transitioning to a container-based architecture for site-based services

Answer(s): A

Show Answer Next Question

QUESTION: 108

A local government that is investigating a data exfiltration claim was asked to review the fingerprint of the malicious user's actions. An investigator took a forensic image of the VM and downloaded the image to a secured USB drive to share with the government.
Which of the following should be taken into consideration during the process of releasing the drive to the government?

Encryption in transit
Legal issues
Chain of custody
Order of volatility
Key exchange

Answer(s): C

Show Answer Next Question

Free CompTIA CAS-004 Exam Questions (page: 28)

QUESTION: 105

QUESTION: 106

Reference:

QUESTION: 107

QUESTION: 108

CAS-004 Exam Discussions & Posts