最新のCAS-001問題集で試験を準備する

CompTIA CAS-001 試験概要:

CompTIA CAS-001 試験シラバストピック:

CompTIA Advanced Security Practitioner 認定 CAS-001 試験問題：

1. An organization determined that each of its remote sales representatives must use a smartphone for email access.
The organization provides the same centrally manageable model to each person.
Which of the following mechanisms BEST protects the confidentiality of the resident data?

A) Require a PIN and automatic wiping of the smartphone if someone enters a specific number of incorrect PINs.
B) Require each sales representative to establish a PIN to access the smartphone and limit email storage to two weeks.
C) Require dual factor authentication when connecting to the organization's email server.
D) Require encrypted communications when connecting to the organization's email server.

2. An administrator is troubleshooting availability issues on a FCoE based storage array that uses deduplication. An administrator has access to the raw data from the SAN and wants to restore the data to different hardware. Which of the following issues may potentially occur?

A) The existing SAN used LUN masking.
B) The new SAN is not FCoE based.
C) The existing SAN may be read-only.
D) The data may not be in a usable format.

3. A data breach occurred which impacted the HR and payroll system. It is believed that an attack from within the organization resulted in the data breach. Which of the following should be performed FIRST after the data breach occurred?

A) Assess system status
B) Review NIDS logs
C) Restore from backup tapes
D) Conduct a business impact analysis

4. A system administrator needs to develop a policy for when an application server is no longer needed. Which of the following policies would need to be developed?

A) De-provisioning policy
B) Provisioning policy
C) Backup policy
D) Data retention policy

5. An internal committee comprised of the facilities manager, the physical security manager, the network administrator, and a member of the executive team has been formed to address a recent breach at a company's data center. It was discovered that during the breach, an HVAC specialist had gained entry to an area that contained server farms holding sensitive financial data. Although the HVAC specialist was there to fix a legitimate issue, the investigation concluded security be provided for the two entry and exit points for the server farm. Which of the following should be implemented to accomplish the recommendations of the investigation?

A) Implement a policy that all non-employees should be escorted in the data center.
B) Place a mantrap at the points with biometric security.
C) Implement CCTV cameras at both points.
D) Hire an HVAC person for the company, eliminating the need for external HVAC people.

質問と回答：