After a company discovered a zero-day vulnerability in its VPN solution, the company plans to deploy cloud- hosted resources to replace its current on-premises systems. An engineer must find an appropriate solution to facilitate trusted connectivity. Which of the following capabilities is the most relevant?
Answer(s): D
Secure Access Service Edge (SASE) is a cloud-native architecture that combines networking and security functions, such as secure VPN replacement, zero-trust access, and cloud-delivered protection. It is the most relevant solution for facilitating trusted, secure connectivity to cloud-hosted resources after a VPN vulnerability.
Recent reports indicate that a software tool is being exploited. Attackers were able to bypass user access controls and load a database. A security analyst needs to find the vulnerability and recommend a mitigation.The analyst generates the following output:Which of the following would the analyst most likely recommend?
Answer(s): C
The strings output reveals hard-coded credentials (admin dBl0ad3r!) within the dbloader.exe binary.Attackers can exploit these to bypass access controls. The analyst should recommend removing hard-coded credentials to mitigate this vulnerability.
The identity and access management team is sending logs to the SIEM for continuous monitoring. The deployed log collector is forwarding logs to the SIEM. However, only false positive alerts are being generated. Which of the following is the most likely reason for the inaccurate alerts?
If the data is not being properly parsed, the SIEM cannot accurately interpret log fields, leading to incorrect or meaningless alert triggers - often resulting in false positives. Proper parsing is essential for accurate correlation and alerting.
The security team is receiving escalated support tickets stating that one of the company's publicly available websites is not loading as expected. Given the following observations:Which of the following is most likely the root cause?
Answer(s): A
The certificate for www.website.com on WEB27 is 418 days old, which likely exceeds its validity period (commonly 398 days per current industry standards). This suggests the certificate has expired, causing the website to fail to load properly.
A company acquires a location with a large infrastructure of legacy devices. Because of the hardware's age and the legacy software's limitations, the OS cannot be upgraded, and the machines cannot be virtualized. These machines are not publicly facing, but they do have internet access. The following controls are currently in place:- EDR- Anti-malware- Logging and monitoring- Host-based firewall- Proxied internet accessA security architect needs to supplement the existing control strategy with one that restricts unauthorized software. Which of the following controls should the architect recommend to best supplement the existing environment?
Application control restricts which software can run on a system, preventing unauthorized or malicious programs from executing. This is the most effective way to supplement existing controls for legacy systems that cannot be patched or virtualized.
Post your Comments and Discuss CompTIA CAS-005 exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the CAS-005 content, but please register or login to continue.