A global organization wants to manage all endpoint and user telemetry. The organization also needs to differentiate this data based on which office it is correlated to. Which of the following strategies best aligns with this goal?
Answer(s): B
Data labeling allows the organization to tag telemetry data with attributes such as office location, enabling differentiation and correlation of data across global offices. This strategy is essential for managing and analyzing telemetry in a distributed environment.
A security architect must make sure that the least number of services as possible is exposed in order to limit an adversary's ability to access the systems. Which of the following should the architect do first?
Attack surface reduction is the most direct and foundational step to minimize the number of exposed services.It involves identifying and disabling unnecessary services, ports, and applications to limit potential entry points for adversaries.
A security officer performs due diligence activities before implementing a third-party solution into the enterprise environment. The security officer needs evidence from the third party that a data subject access request handling process is in place. Which of the following is the security officer most likely seeking to maintain compliance?
Answer(s): C
Privacy regulations (such as GDPR or CCPA) require organizations to handle data subject access requests (DSARs), which allow individuals to access, correct, or delete their personal data. The security officer is ensuring the third party complies with these privacy obligations.
An administrator needs to craft a single certificate-signing request for a web-server certificate. The server should be able to use the following identities to mutually authenticate other resources over TLS:www.int.comptia.org webserver01 .int.comptia.org10.5.100.10Which of the following certificate fields must be set properly to support this objective?
Answer(s): A
The Subject Alternative Name (SAN) field must be properly set to include all the required identities - FQDNs and IP addresses - so the certificate can be used for mutual TLS authentication with those specific identifiers.
A security analyst reviews the following event timeline from an EDR solution:Which of the following has most likely occurred and needs to be fixed?
The event timeline shows that hr-reporting.docx was executed and launched a script before the malware scan completed and detected it as malicious. This indicates a TOCTOU (Time-of-Check to Time-of-Use) vulnerability - where the file was checked after it was already used. This logic flaw needs to be fixed by the vendor to ensure scans complete before allowing execution.
Post your Comments and Discuss CompTIA CAS-005 exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the CAS-005 content, but please register or login to continue.