Which of the following best explains why AI output could be inaccurate?
Answer(s): A
Model poisoning involves deliberately feeding malicious or biased data into an AI model during training, leading to inaccurate or manipulated outputs. It directly affects the model's behavior and reliability.
A company runs a DAST scan on a web application. The tool outputs the following recommendations:- Use Cookie prefixes.- Content Security Policy - SameSite=strict is not set.Which of the following vulnerabilities has the tool identified?
Answer(s): C
The recommendations to use Cookie prefixes and set SameSite=strict relate directly to mitigating Cross-Site Request Forgery (CSRF) attacks by restricting how cookies are sent with cross-site requests.
Which of the following best describes the reason a network architect would enable forward secrecy on all VPN tunnels?
Answer(s): B
Forward secrecy ensures that even if long-term private keys are compromised, past session keys remain secure. This reduces the success of attackers performing cryptanalysis on captured encrypted traffic.
Which of the following best explains the importance of determining organizational risk appetite when operating with a constrained budget?
Risk appetite defines the level of risk an organization is willing to accept. When budgets are constrained, understanding this threshold is essential to prioritize resources and determine whether to accept, mitigate, or transfer high-impact, low-likelihood risks.
A company hired an email service provider called my-email.com to deliver company emails. The company started having several issues during the migration. A security engineer is troubleshooting and observes the following configuration snippet:Which of the following should the security engineer modify to fix the issue? (Choose two.)
Answer(s): D,F
The email CNAME currently points to srv01.company.com, which resolves to an internal IP (192.168.1.10). For proper mail delivery through the external provider, this should be replaced with an A record pointing directly to the correct public IP or provider's mail server.The TXT record shown is a DMARC record, but to authorize the external email provider (my-email.com), an SPF (Sender Policy Framework) record must be configured using:"v=spf1 ip4:192.168.1.10 include:my-email.com ~all"
Post your Comments and Discuss CompTIA CAS-005 exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the CAS-005 content, but please register or login to continue.