A systems engineer is configuring SSO for a business that will be using SaaS applications for its remote-only workforce. Privileged actions in SaaS applications must be allowed only from corporate mobile devices that meet minimum security requirements, but BYOD must also be permitted for other activity. Which of the following would best meet this objective?
Answer(s): C
Device attestations and continuous authorization controls verify the security posture of a device in real time and enforce dynamic access decisions. This approach ensures privileged actions are allowed only from compliant corporate devices, while still permitting limited access from BYOD devices.
A systems administrator wants to reduce the number of failed patch deployments in an organization. The administrator discovers that system owners modify systems or applications in an ad hoc manner. Which of the following is the best way to reduce the number of failed patch deployments?
Change management establishes formal processes for reviewing, approving, and documenting changes to systems. This prevents untracked or unauthorized modifications, reducing the likelihood of patch failures due to unexpected system states.
A network engineer must ensure that always-on VPN access is enabled but restricted to company assets. Which of the following best describes what the engineer needs to do?
Answer(s): A
Generating device certificates with specific template settings allows the VPN solution to authenticate and restrict access strictly to company-managed devices. This enforces always-on VPN policies while preventing unauthorized devices from connecting.
A security administrator is reviewing the following code snippet from a website component:A review of the inc.tmp file shows the following:214875925793253420385093450834534324525234352353455234532423534245234534523453896 276563857932578395378543620382630532804508325Which of the following is most likely the reason for inaccuracies?
The code snippet includes obfuscated PHP code that loads and executes content from a temporary file (inc.tmp) via hex2bin(file_get_contents(...)), often seen in web malware injections. This strongly suggests that a CMS plug-in has been exploited to inject malicious code into the website.
An organization wants to implement a platform to better identify which specific assets are affected by a given vulnerability. Which of the following components provides the best foundation to achieve this goal?
Answer(s): B
A Configuration Management Database (CMDB) maintains detailed records of all IT assets and their configurations. It provides the foundational visibility needed to map vulnerabilities to specific assets, enabling targeted risk management.
Post your Comments and Discuss CompTIA CAS-005 exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the CAS-005 content, but please register or login to continue.