A penetration tester is testing a company’s login form for a web application using a list of known usernames and a common password list. According to a brute-force utility, the penetration tester needs to provide the tool with the proper headers, POST URL with variable names, and the error string returned with an improper login. Which of the following would BEST help the tester to gather this information? (Choose two.)
Answer(s): C,E
A security analyst has concerns about malware on an endpoint. The malware is unable to detonate by modifying the kernel response to various system calls. As a test, the analyst modifies a Windows server to respond to system calls as if it was a Linux server. In another test, the analyst modifies the operating system to prevent the malware from identifying target files. Which of the following techniques is the analyst MOST likely using?
Answer(s): B
Users are claiming that a web server is not accessible. A security engineer is unable to view the Internet Services logs for the site. The engineer connects to the server and runs netstat – an and receives the following output:Which of the following is MOST likely happening to the server?
Answer(s): D
An architect is designing security scheme for an organization that is concerned about APTs. Any proposed architecture must meet the following requirements:• Services must be able to be reconstituted quickly from a known-good state.• Network services must be designed to ensure multiple diverse layers of redundancy.• Defensive and responsive actions must be automated to reduce human operator demands.Which of the following designs must be considered to ensure the architect meets these requirements? (Choose three.)
Answer(s): B,C,H
A company is on a deadline to roll out an entire CRM platform to all users at one time. However, the company is behind schedule due to reliance on third-party vendors. Which of the following development approaches will allow the company to begin releases but also continue testing and development for future releases?
Answer(s): A
Post your Comments and Discuss CompTIA CAS-004 exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the CAS-004 content, but please register or login to continue.