A server in a manufacturing environment is running an end-of-life operating system. The vulnerability management team is recommending that the server be upgraded to a supported operating system, but the ICS software running on the server is not compatible with modem operating systems. Which of the following compensating controls should be implemented to BEST protect the server?
Answer(s): A
A firewall administrator needs to ensure all traffic across the company network is inspected. The administrator gathers data and finds the following information regarding the typical traffic in the network:Which of the following is the BEST solution to ensure the administrator can complete the assigned task?
Answer(s): D
A city government's IT director was notified by the city council that the following cybersecurity requirements must be met to be awarded a large federal grant:• Logs for all critical devices must be retained for 365 days to enable monitoring and threat hunting.• All privileged user access must be tightly controlled and tracked to mitigate compromised accounts.• Ransomware threats and zero-day vulnerabilities must be quickly identified.Which of the following technologies would BEST satisfy these requirements? (Choose three.)
Answer(s): B,D,F
Company A acquired Company B. During an initial assessment, the companies discover they are using the same SSO system. To help users with the transition. Company A is requiring the following:• Before the merger is complete, users from both companies should use a single set of usernames and passwords.• Users in the same departments should have the same set of rights and privileges, but they should have different sets of rights and privileges if they have different IPs.• Users from Company B should be able to access Company A's available resources.Which of the following are the BEST solutions? (Choose two.)
Answer(s): B,D
Prior to a risk assessment inspection, the Chief Information Officer tasked the systems administrator with analyzing and reporting any configuration issues on the information systems, and then verifying existing security settings. Which of the following would be BEST to use?
Post your Comments and Discuss CompTIA CAS-004 exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the CAS-004 content, but please register or login to continue.