Online Access Free CAS-001 Exam Questions

Which of the following are components defined within an Enterprise Security Architecture Framework? (Select THREE).

• A.Business requirements documents
• B.Solution designs
• C.Business capabilities
• D.Business cases
• E.Business vision and drivers
• F.Solution architectures
• G.Implementation run-sheets
• H.Reference models

The security manager of a company has hired an external consultant to conduct a security assessment of the company network. The contract stipulates that the consultant is not allowed to transmit any data on the company network while performing wired and wireless security assessments. Which of the following technical means can the consultant use to determine the manufacturer and likely operating system of the company wireless and wired network devices, as well as the computers connected to the company network?

• A.Protocol analyzer
• B.Port scanner
• C.Grey box testing
• D.Social engineering

A small customer focused bank with implemented least privilege principles, is concerned about the possibility of branch staff unintentionally aiding fraud in their day to day interactions with customers. Bank staff has been encouraged to build friendships with customers to make the banking experience feel more personal. The security and risk team have decided that a policy needs to be implemented across all branches to address the risk. Which of the following BEST addresses the security and risk team's concerns?

• A.Separation of duties
• B.Information disclosure policy
• C.Awareness training
• D.Job rotation

The security administrator at 'company.com' is reviewing the network logs and notices a new UDP port pattern where the amount of UDP port 123 packets has increased by 20% above the baseline. The administrator runs a packet capturing tool from a server attached to a SPAN port and notices the following.
UDP 192.168.0.1:123 -> 172.60.3.0:123 UDP 192.168.0.36:123 -> time.company.com UDP 192.168.0.112:123 -> 172.60.3.0:123 UDP 192.168.0.91:123 -> time.company.com UDP 192.168.0.211:123 -> 172.60.3.0:123 UDP 192.168.0.237:123 -> time.company.com UDP 192.168.0.78:123 -> 172.60.3.0:123
The corporate HIPS console reports an MD5 hash mismatch on the svchost.exe file of the following computers:
192.168.0.1
192.168.0.112
192.168.0.211
192.168.0.78
Which of the following should the security administrator report to upper management based on the above output?

• A.A DNS cache poisoning successfully exploited some hosts.
• B.An NTP client side attack successfully exploited some hosts.
• C.A DNS server side attack successfully exploited some hosts.
• D.An NTP server side attack successfully exploited some hosts.

When authenticating over HTTP using SAML, which of the following is issued to the authenticating user?

• A.An X.509 certificate
• B.A symmetric key
• C.An assertion ticket
• D.A PKI ticket