Online Access Free CAS-003 Exam Questions

A security engineer is investigating a compromise that occurred between two internal computers. The engineer has determined during the investigation that one computer infected another. While reviewing the IDS logs, the engineer can view the outbound callback traffic, but sees no traffic between the two computers. Which of the following would BEST address the IDS visibility gap?

• A.Install HIDS on each computer.
• B.SPAN traffic form the network core into the IDS.
• C.Install network taps at the edge of the network.
• D.Send syslog from the IDS into the SIEM.

As a security administrator, you are asked to harden a server running Red Hat Enterprise Server 5.5 64-bit.
This server is being used as a DNS and time server. It is not used as a database, web server, or print server. There are no wireless connections to the server, and it does not need to print.
The command window will be provided along with root access. You are connected via a secure shell with root access.
You may query help for a list of commands.
Instructions:
You need to disable and turn off unrelated services and processes.
It is possible to simulate a crash of your server session. The simulation can be reset, but the server cannot be rebooted. If at any time you would like to bring back the initial state of the simulation, please click the Reset All button.

Which of the following is the GREATEST security concern with respect to BYOD?

• A.Removing potential bottlenecks in data transmission paths.
• B.The transfer of corporate data onto mobile corporate devices.
• C.The migration of data into and out of the network in an uncontrolled manner.
• D.The filtering of sensitive data out of data flows at geographic boundaries.

Given the following information about a company's internal network:
User IP space: 192.168.1.0/24
Server IP space: 192.168.192.0/25
A security engineer has been told that there are rogue websites hosted outside of the proper server space, and those websites need to be identified. Which of the following should the engineer do?

• A.Use a protocol analyzer on 192.168.1.0/24
• B.Use a protocol analyzer on 192.168.192.0/25
• C.Use a port scanner on 192.168.1.0/24
• D.Use an HTTP interceptor on 192.168.192.0/25
• E.Use a port scanner on 192.168.192.0/25
• F.Use an HTTP interceptor on 192.168.1.0/24

A security analyst is reviewing the security of a company's public-facing servers After some research the analyst discovers the following on a public pastebin website.

Which of the following should the analyst do NEXT?

• A.Review the system logs
• B.Scan *.company com for vulnerabilities.
• C.Begin a root cause analysis.
• D.Change the password to the MySQL database