A financial technology firm works collaboratively with business partners in the industry to share threat intelligence within a central platform. This collaboration gives partner organizations the ability to obtain and share data associated with emerging threats from a variety of adversaries. Which of the following should the organization most likely leverage to facilitate this activity? (Choose two.)
Answer(s): D,E
STIX (Structured Threat Information Expression) is a standardized language for sharing cyber threat intelligence in a structured and consistent format.TAXII (Trusted Automated Exchange of Intelligence Information) is the protocol used to securely transport STIX data between parties, enabling automated threat intelligence sharing.
A company wants to invest in research capabilities with the goal to operationalize the research output. Which of the following is the best option for a security architect to recommend?
Answer(s): B
A Threat Intelligence Platform (TIP) is designed to collect, analyze, and operationalize threat intelligence data. It enables organizations to turn research outputs into actionable security measures, integrating with security tools for automation and response.
A company is concerned about the security of customer data. The IT department has configured all web applications with appropriate access controls to restrict to only authorized users. Which of the following solutions addresses this concern?
Answer(s): C
Data Loss Prevention (DLP) solutions are specifically designed to prevent unauthorized access, sharing, or exfiltration of sensitive data such as customer information. It complements access controls by monitoring and enforcing data protection policies.
A security analyst reviews the following report:Which of the following assessments is the analyst performing?
The analyst is reviewing information related to product origin, manufacturers, OS, developers, and vendors - key components of a supply chain assessment, which evaluates potential risks from third-party components and service providers.
A security researcher tells a company that one of its solutions is vulnerable to buffer overflow, leading to a malicious coding execution. Which of the following is the best way to avoid this vulnerability in future versions?
Static Application Security Testing (SAST) tools analyze source code during development to detect vulnerabilities like buffer overflows early in the software development lifecycle, allowing for proactive mitigation before deployment.
Post your Comments and Discuss CompTIA CAS-005 exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the CAS-005 content, but please register or login to continue.