Online Access Free CAS-002 Exam Questions

A security consultant is conducting a network assessment and wishes to discover any legacy backup Internet connections the network may have. Where would the consultant find this information and why would it be valuable?

• A.This information can be found in global routing tables, and is valuable because backup connections typically do not have perimeter protection as strong as the primary connection.
• B.This information can be found by calling the regional Internet registry, and is valuable because backup connections typically do not require VPN access to the network.
• C.This information can be found by querying the network's DNS servers, and is valuable because backup DNS servers typically allow recursive queries from Internet hosts.
• D.This information can be found by accessing telecom billing records, and is valuable because backup connections typically have much lower latency than primary connections.

A security manager is collecting RFQ, RFP, and RFI publications to help identify the technology trends which a government will be moving towards in the future. This information is available to the public. By consolidating the information, the security manager will be able to combine several perspectives into a broader view of technology trends. This is an example of which of the following? (Select TWO).

• A.Supervisory control and data acquisition
• B.Data aggregation
• C.Open source intelligence gathering
• D.Espionage
• E.Universal description discovery and integration
• F.Hacktivism

An administrator is trying to categorize the security impact of a database server in the case of a security event. There are three databases on the server.
Current Financial Data = High level of damage if data is disclosed. Moderate damage if the system goes offline Archived Financial Data = No need for the database to be online. Low damage for integrity loss Public Website Data = Low damage if the site goes down. Moderate damage if the data is corrupted Given these security categorizations of each database, which of the following is the aggregate security categorization of the database server?

• A.Database server = {(Confidentiality HIGH),(Integrity Moderate),(Availability Low)}
• B.Database server = {(Confidentiality Moderate),(Integrity Moderate),(Availability Moderate)}
• C.Database server = {(Confidentiality HIGH),(Integrity Moderate),(Availability Moderate)}
• D.Database server = {(Confidentiality HIGH),(Integrity High),(Availability High)}

An administrator's company has recently had to reduce the number of Tier 3 help desk technicians available to support enterprise service requests. As a result, configuration standards have declined as administrators develop scripts to troubleshoot and fix customer issues. The administrator has observed that several default configurations have not been fixed through applied group policy or configured in the baseline. Which of the following are controls the administrator should recommend to the organization's security manager to prevent an authorized user from conducting internal reconnaissance on the organization's network? (Select THREE).

• A.IdM
• B.Port security
• C.Search engine reconnaissance
• D.Disable command execution
• E.HIDS
• F.TLS
• G.Network file system
• H.NIDS
• I.BIOS security

A port in a fibre channel switch failed, causing a costly downtime on the company's primary website. Which of the following is the MOST likely cause of the downtime?

• A.The web server was not multipathed.
• B.The SAN replication to the backup site failed.
• C.The web server iSCSI initiator was down.
• D.The SAN snapshots were not up-to-date.