An organization recently recovered from an attack that featured an adversary injecting malicious logic into OS bootloaders on endpoint devices. Therefore, the organization decided to require the use of TPM for measured boot and attestation, monitoring each component from the UEFI through the full loading of OS components. Which of the following TPM structures enables this storage functionality?
Answer(s): D
A developer wants to develop a secure, external-facing web application. The developer is looking for an online community that produces tools, methodologies, articles, and documentation in the field of web-application security. Which of the following is the BEST option?
Answer(s): C
An administrator at a software development company would like to protect the integrity of the company's applications with digital signatures. The developers report that the signing process keeps failing on all applications. The same key pair used for signing, however, is working properly on the website, is valid, and is issued by a trusted CA. Which of the following is MOST likely the cause of the signature failing?
A company created an external, PHP-based web application for its customers. A security researcher reports that the application has the Heartbleed vulnerability.Which of the following would BEST resolve and mitigate the issue? (Choose two.)
Answer(s): B,F
A security engineer is reviewing a record of events after a recent data breach incident that involved the following:-A hacker conducted reconnaissance and developed a footprint of the company's Internet-facing web application assets.-A vulnerability in a third-party library was exploited by the hacker, resulting in the compromise of a local account.-The hacker took advantage of the account's excessive privileges to access a data store and exfiltrate the data without detection.Which of the following is the BEST solution to help prevent this type of attack from being successful in the future?
Post your Comments and Discuss CompTIA CAS-004 exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the CAS-004 content, but please register or login to continue.