CAS-003 Exam Question 61

A Chief Information Officer (CIO) publicly announces the implementation of a new financial system. As part of a security assessment that includes a social engineering task, which of the following tasks should be conducted to demonstrate the BEST means to gain information to use for a report on social vulnerability details about the financial system?
  • CAS-003 Exam Question 62

    A company is implementing a new secure identity application, given the following requirements
    * The cryptographic secrets used in the application must never be exposed to users or the OS
    * The application must work on mobile devices.
    * The application must work with the company's badge reader system
    Which of the following mobile device specifications are required for this design? (Select TWO).
  • CAS-003 Exam Question 63

    An organization is concerned with potential data loss in the event of a disaster, and created a backup datacenter as a mitigation strategy. The current storage method is a single NAS used by all servers in both datacenters. Which of the following options increases data availability in the event of a datacenter failure?
  • CAS-003 Exam Question 64

    A company has noticed recently that its corporate information has ended up on an online forum. An investigation has identified that internal employees are sharing confidential corporate information on a daily basis. Which of the following are the MOST effective security controls that can be implemented to stop the above problem? (Select TWO).
  • CAS-003 Exam Question 65

    A security tester is testing a website and performs the following manual query:
    https://www.comptia.com/cookies.jsp?products=5%20and%201=1
    The following response is received in the payload:
    "ORA-000001: SQL command not properly ended"
    Which of the following is the response an example of?