A company established a new process for business analysts to receive emails that contain links for purchase requests. The new process requires links to be submitted through new emails. Which of the following is the best way to secure this process without disrupting order fulfillment?
Answer(s): A
Deploying a browser isolation solution would be the best way to secure this process without disrupting order fulfillment. It allows users to click on links within emails while keeping any potentially harmful content isolated from the rest of the network. This prevents malicious links from affecting internal systems while still enabling users to complete their tasks without disruption.
An organization receives OSINT reports about an increase in ransomware targeting fileshares at peer companies. The organization wants to deploy hardening policies to its servers and workstations in order to contain potential ransomware. Which of the following should an engineer do to best achieve this goal?
Restricting port 445 traffic to fileshares and allowing only interactive logins on workstations would be an effective way to contain ransomware. Port 445 is commonly used by ransomware for lateral movement and spreading across a network, especially when exploiting SMB vulnerabilities. By blocking or restricting access to this port, the organization reduces the risk of ransomware propagating through the network. Limiting user logins to only interactive sessions also prevents unauthorized remote access, which could be exploited by ransomware.
A malicious actor exploited firmware vulnerabilities and used rootkits in an attack on an organization. After the organization recovered from the incident, an engineer needs to recommend a solution that reduces the likelihood of the same type of attack in the future. Which of the following is the most relevant solution?
Answer(s): C
Implementing measured boot ensures that the system's firmware and boot process are verified for integrity before the OS is loaded. This prevents attacks that exploit firmware vulnerabilities or use rootkits, as any tampered components will be detected during the boot process. It is a crucial step to mitigate this type of attack in the future.
Which of the following enables the meaningful manipulation of encrypted data when the processor does not know the encryption key?
Answer(s): D
Homomorphic encryption allows for the manipulation and computation of encrypted data without needing to decrypt it, meaning the processor does not require access to the encryption key. This enables meaningful operations on encrypted data while maintaining confidentiality.
Emails that the marketing department is sending to customers are going to the customers' spam folders. The security team is investigating the issue and discovers that the certificates used by the email server were reissued, but DNS records had not been updated. Which of the following should the security team update in order to fix this issue? (Choose three.)
Answer(s): A,B,C
DMARC (Domain-based Message Authentication, Reporting & Conformance): Ensures that email sent from the domain is properly authenticated and aligned with the SPF and DKIM records.SPF (Sender Policy Framework): Defines which mail servers are allowed to send emails on behalf of the domain. It must be updated to reflect the new email server configuration.DKIM (DomainKeys Identified Mail): Ensures the email's content is verified to prevent tampering during transit. It must be updated to align with the new certificates for signing outgoing mail.Updating these records will help ensure that the emails are authenticated correctly and are not flagged as spam by recipient mail servers.
Post your Comments and Discuss CompTIA CAS-005 exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the CAS-005 content, but please register or login to continue.