CompTIA CAS-001 시험 개요:

CompTIA CAS-001 시험 요강 주제:

최신 CompTIA Advanced Security Practitioner CAS-001 무료샘플문제

문제 #1

A security manager has received the following email from the Chief Financial Officer (CFO):
"While I am concerned about the security of the proprietary financial data in our ERP application, we have had a lot of turnover in the accounting group and I am having a difficult time meeting our monthly performance targets. As things currently stand, we do not allow employees to work from home but this is something I am willing to allow so we can get back on track. What should we do first to securely enable this capability for my group?"
Based on the information provided, which of the following would be the MOST appropriate response to the CFO?

A. Remote access to the ERP tool introduces additional security vulnerabilities and should not be allowed.
B. Work with the executive management team to revise policies before allowing any remote access.
C. Allow terminal services access from personal computers after the CFO provides a list of the users working from home.
D. Allow VNC access to corporate desktops from personal computers for the users working from home.

문제 #2

The internal audit department is investigating a possible breach of security. One of the auditors is sent to interview the following employees:
Employee A. Works in the accounts receivable office and is in charge of entering data into the finance system.
Employee B. Works in the accounts payable office and is in charge of approving purchase orders.
Employee C. Is the manager of the finance department, supervises Employee A and Employee B, and can perform the functions of both Employee A and Employee B.
Which of the following should the auditor suggest be done to avoid future security breaches?

A. The manager should be able to both enter and approve information.
B. Employee A and Employee B should rotate jobs at a set interval and cross-train.
C. The manager should only be able to review the data and approve purchase orders.
D. All employees should have the same access level to be able to check on each others.

문제 #3

A financial institution wants to reduce the costs associated with managing and troubleshooting employees' desktops and applications, while keeping employees from copying data onto external storage. The Chief Information Officer (CIO) has asked the security team to evaluate four solutions submitted by the change management group. Which of the following BEST accomplishes this task?

A. Implement VDI and disable hardware and storage mapping from the thin client.
B. Implement desktop virtualization and encrypt all sensitive data at rest and in transit.
C. Move the critical applications to a private cloud and disable VPN and tunneling.
D. Implement server virtualization and move the application from the desktop to the server.

문제 #4

After a security incident, an administrator would like to implement policies that would help reduce fraud and the potential for collusion between employees. Which of the following would help meet these goals by having co-workers occasionally audit another worker's position?

A. Mandatory vacation
B. Separation of duties
C. Least privilege
D. Job rotation

문제 #5

The Universal Research Association has just been acquired by the Association of Medical Business Researchers. The new conglomerate has funds to upgrade or replace hardware as part of the acquisition, but cannot fund labor for major software projects. Which of the following will MOST likely result in some IT resources not being integrated?

A. One of the companies may use an outdated VDI.
B. Corporate websites may be optimized for different web browsers.
C. Industry security standards and regulations may be in conflict.
D. Data loss prevention standards in one company may be less stringent.

질문과 대답: