A hospital provides tablets to its medical staff to enable them to more quickly access and edit patients' charts. The hospital wants to ensure that if a tablet is identified as lost or stolen and a remote command is issued, the risk of data loss can be mitigated within seconds. The tablets are configured as follows to meet hospital policy:Full disk encryption is enabled."Always On" corporate VPN is enabled.eFuse-backed keystore is enabled/ready.Wi-Fi 6 is configured with SAE.Location services is disabled.Application allow list is unconfigured.Assuming the hospital policy cannot be changed, which of the following is the best way to meet the hospital's objective?
Answer(s): B
Cryptographically erasing FDE (Full Disk Encryption) volumes is the most effective way to mitigate data loss within seconds. It renders the encrypted data inaccessible by destroying the encryption key, which can be done instantly and remotely, meeting the hospital's objective without requiring changes to existing policy.
A compliance officer is facilitating a business impact analysis and wants business unit leaders to collect meaningful data. Several business unit leaders want more information about the types of data the officer needs. Which of the following data types would be the most beneficial for the compliance officer? (Choose two.)
Answer(s): C,F
Costs associated with downtime help quantify the financial impact of disruptions, which is essential for a business impact analysis (BIA).Critical processes identify essential functions that must be prioritized for recovery, allowing the compliance officer to assess the consequences of interruptions effectively.
An ISAC supplied recent threat intelligence information about pictures used on social media that provide reconnaissance of systems in use in secure facilities. In response, the Chief Information Security Officer (CISO) wants several configuration changes implemented via the MDM to ensure the following:Camera functions and location services are blocked for corporate mobile devices.All social media is blocked on the corporate and guest wireless networks.Which of the following is the CISO practicing to safeguard against the threat?
The CISO is practicing Operational Security (OPSEC) by implementing controls that prevent the unintentional disclosure of sensitive information, such as system details visible in photos shared on social media. Blocking cameras, location services, and social media access helps maintain operational confidentiality.
A company needs to define a new road map for improving secure coding practices in the software development life cycle and implementing better security standards. Which of the following is the best way for the company to achieve this goal?
Answer(s): A
Performing a Software Assurance Maturity Model (SAMM) assessment provides a structured way to evaluate current secure software practices and generate a tailored improvement road map. It aligns well with the goal of enhancing secure coding practices and implementing better security standards across the SDLC.
A security architect wants to develop a baseline of security configurations. These configurations automatically will be utilized every time a new virtual machine is created. Which of the following technologies should the security architect deploy to accomplish this goal?
Answer(s): C
Ansible is an infrastructure-as-code tool that allows the security architect to automate and enforce baseline security configurations every time a new virtual machine is created, ensuring consistency and compliance across deployments.
Post your Comments and Discuss CompTIA CAS-005 exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the CAS-005 content, but please register or login to continue.