A company's SIEM is designed to associate the company's asset inventory with user events. Given the following report:Which of the following should a security engineer investigate first as part of a log audit?
Answer(s): D
The report shows that Server 4's Administrator account has attempted log-ins (2) but no successful log- ins. This suggests unauthorized usage attempts of the administrator account. Given the criticality of the administrator account, this should be investigated immediately to rule out any potential security breach or unauthorized access attempt.
A developer receives feedback about code quality and efficiency. The developer needs to identify and resolve the following coding issues before submitting the code changes for peer review:- Indexing beyond arrays- Dereferencing null pointers- Potentially dangerous data type combos- Unreachable code- Non-portable constructsWhich of the following would be most appropriate for the developer to use in this situation?
Answer(s): A
Linting is a tool used to analyze code for potential errors, such as indexing beyond arrays, dereferencing null pointers, and detecting unreachable or non-portable code. It helps identify issues with code quality and efficiency early in the development process, making it the most appropriate tool for the developer in this scenario.
A company wants to improve and automate the compliance of its cloud environments to meet industry standards. Which of the following resources should the company use to best achieve this goal?
Answer(s): C
Ansible is a configuration management tool that can automate the process of ensuring compliance in cloud environments. It allows for the automation of tasks such as enforcing industry standards, applying security patches, and managing infrastructure as code. This makes it the best choice for automating compliance in cloud environments.
A company wants to protect against the most common attacks and rapidly integrate with different programming languages. Which of the following technologies is most likely to meet this need?
RASP (Runtime Application Self-Protection) is a technology that protects applications from common attacks in real-time by integrating directly into the application during execution. It provides the ability to detect and block attacks, such as SQL injection or cross-site scripting, and can easily integrate with different programming languages, making it an ideal solution for the company's needs.
An organization is concerned about insider threats from employees who have individual access to encrypted material. Which of the following techniques best addresses this issue?
Answer(s): E
Key splitting involves dividing the encryption key into multiple parts, where no single individual holds the entire key. This technique prevents any one person from being able to decrypt the encrypted material by themselves, thus reducing the risk of insider threats.
Post your Comments and Discuss CompTIA CAS-005 exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the CAS-005 content, but please register or login to continue.