A manufacturing plant is updating its IT services. During discussions, the senior management team created the following list of considerations:- Staff turnover is high and seasonal.- Extreme conditions often damage endpoints.- Losses from downtime must be minimized.- Regulatory data retention requirements exist.Which of the following best addresses the considerations?
Answer(s): B
Using a non-persistent virtual desktop interface (VDI) with thin clients addresses the concerns effectively.Thin clients are durable and less prone to damage, and VDI allows for easy reconfiguration and deployment of endpoints, especially in environments with high staff turnover. It also reduces the impact of endpoint failures and minimizes downtime while meeting regulatory data retention requirements, as the data resides centrally.
A software vendor provides routine functionality and security updates to its global customer base. The vendor would like to ensure distributed updates are authorized, originate from only the company, and have not been modified by others. Which of the following solutions best supports these objectives?
Answer(s): D
Code signing ensures that updates are authentic, have not been tampered with, and originate from the authorized software vendor. It uses digital signatures to verify the integrity and origin of the update, fulfilling the vendor's requirements to secure distributed updates.
A security analyst detects a possible RAT infection on a computer in the internal network. After reviewing the details of the alert, the analyst identifies the initial vector of the attack was an email that was forwarded to multiple recipients in the same organizational unit. Which of the following should the analyst do first to minimize this type of threat in the future?
A security awareness program is the best initial step to minimize threats like this in the future. It helps employees recognize phishing emails, which are a common method for malware infections, and prevents them from forwarding malicious emails. Educating users is key in reducing human error, which is often the starting point for attacks like RAT infections.
A cloud engineer needs to identify appropriate solutions to:- Provide secure access to internal and external cloud resources.- Eliminate split-tunnel traffic flows.- Enable identity and access management capabilities.Which of the following solutions is the most appropriate?
SASE (Secure Access Service Edge) is the most appropriate solution because it combines network security and WAN capabilities, providing secure access to both internal and external resources, eliminating split-tunnel traffic, and offering robust identity and access management capabilities. It integrates security directly into the network architecture, which meets all the listed requirements.
A security engineer is building a solution to disable weak CBC configurations for remote access connections to Linux systems. Which of the following should the security engineer modify?
To disable weak CBC (Cipher Block Chaining) configurations for remote access on Linux systems, the security engineer should modify the /etc/sshd/ssh_config file and update the list of supported ciphers. This will ensure that only strong encryption algorithms are used for SSH connections, improving security by preventing weak CBC ciphers from being used.
Post your Comments and Discuss CompTIA CAS-005 exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the CAS-005 content, but please register or login to continue.