In order to save money, a company has moved its data to the cloud with a low-cost provider. The company did not perform a security review prior to the move; however, the company requires all of its data to be stored within the country where the headquarters is located. A new employee on the security team has been asked to evaluate the current provider against the most important requirements. The current cloud provider that the company is using offers:• Only multitenant cloud hosting• Minimal physical security• Few access controls• No access to the data centerThe following information has been uncovered:• The company is located in a known floodplain. which flooded last year.• Government regulations require data to be stored within the country.Which of the following should be addressed FIRST?
Answer(s): D
A security administrator needs to implement an X.509 solution for multiple sites within the human resources department. This solution would need to secure all subdomains associated with the domain name of the main human resources web server. Which of the following would need to be implemented to properly secure the sites and provide easier private key management?
Answer(s): C
An organization’s threat team is creating a model based on a number of incidents in which systems in an air-gapped location are compromised. Physical access to the location and logical access to the systems are limited to administrators and select, approved, on-site company employees. Which of the following is the BEST strategy to reduce the risks of data exposure?
An organization is establishing a new software assurance program to vet applications before they are introduced into the production environment. Unfortunately, many of the applications are provided only as compiled binaries. Which of the following should the organization use to analyze these applications? (Choose two.)
Answer(s): E,F
Which of the following agreements includes no penalties and can be signed by two entities that are working together toward the same goal?
Answer(s): A
Post your Comments and Discuss CompTIA CAS-004 exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the CAS-004 content, but please register or login to continue.