Online Access Free CompTIA.CAS-003.v2021-10-13.q221 Practice Test (Page 39)

CAS-003 Exam Question 186

Exhibit:

A.Step 1: Verify that the certificate is valid or not. In case of any warning message, cancel the download.
Step 2: If certificate issue is not there then, download the file in your system.
Step 3: Calculate the hash value of the downloaded file.
Step 4: Install the file if the hash value matches.

B.Step 1: Verify that the certificate is valid or not. In case of any warning message, cancel the download.
Step 2: If certificate issue is not there then, download the file in your system.
Step 3: Calculate the hash value of the downloaded file.
Step 4: Match the hash value of the downloaded file with the one which you selected on the website.
Step 5: Install the file if the hash value matches.

CAS-003 Exam Question 187

Using SSL, an administrator wishes to secure public facing server farms in three subdomains: dc1.east.company.com, dc2.central.company.com, and dc3.west.company.com. Which of the following is the number of wildcard SSL certificates that should be purchased?

A.0

B.1

C.3

D.6

CAS-003 Exam Question 188

Some mobile devices are jail-broken by connecting via USB cable and then exploiting software vulnerabilities to get kernel-level access.
Which of the following attack types represents this scenario? (Select TWO).

A.Session management attack

B.Man-in-the-middle

C.Protocol fuzzing

D.Privilege escalation

E.Physical attack

F.Root-kit compromise

CAS-003 Exam Question 189

Company policy requires that all unsupported operating systems be removed from the network.
The security administrator is using a combination of network based tools to identify such systems for the purpose of disconnecting them from the network. Which of the following tools, or outputs from the tools in use, can be used to help the security administrator make an approximate determination of the operating system in use on the local company network? (Select THREE).

A.Passive banner grabbing

B.Password cracker

C.http://www.company.org/documents_private/index.php?search=string#&topic=windows&tcp
=packet%20capture&cookie=wokdjwalkjcnie61lkasdf2aliser4

D.443/tcp open http

E.dig host.company.com

F.09:18:16.262743 IP (tos 0x0, ttl 64, id 9870, offset 0, flags [none], proto TCP (6), length
40)
192.168.1.3.1051 > 10.46.3.7.80: Flags [none], cksum 0x1800 (correct), win 512, length 0

G.Nmap

CAS-003 Exam Question 190

The Information Security Officer (ISO) believes that the company has been targeted by cybercriminals and it is under a cyber attack. Internal services that are normally available to the public via the Internet are inaccessible, and employees in the office are unable to browse the Internet. The senior security engineer starts by reviewing the bandwidth at the border router, and notices that the incoming bandwidth on the router's external interface is maxed out. The security engineer then inspects the following piece of log to try and determine the reason for the downtime, focusing on the company's external router's IP which is 128.20.176.19:
11:16:22.110343 IP 90.237.31.27.19 > 128.20.176.19.19: UDP, length 1400
11:16:22.110351 IP 23.27.112.200.19 > 128.20.176.19.19: UDP, length
1400
11:16:22.110358 IP 192.200.132.213.19 > 128.20.176.19.19: UDP, length
1400
11:16:22.110402 IP 70.192.2.55.19 > 128.20.176.19.19: UDP, length 1400
11:16:22.110406 IP 112.201.7.39.19 > 128.20.176.19.19: UDP, length 1400 Which of the following describes the findings the senior security engineer should report to the ISO and the BEST solution for service restoration?

A.After the senior engineer used a network analyzer to identify an active Fraggle attack, the company's ISP should be contacted and instructed to block the malicious packets.

B.After the senior engineer used the above IPS logs to detect the ongoing DDOS attack, an IPS filter should be enabled to block the attack and restore communication.

C.After the senior engineer used a mirror port to capture the ongoing amplification attack, a BGP sinkhole should be configured to drop traffic at the source networks.

D.After the senior engineer used a packet capture to identify an active Smurf attack, an ACL should be placed on the company's external router to block incoming UDP port 19 traffic.

Other Version: 2098CompTIA.CAS-003.v2022-04-30.q101; 61CompTIA.Itpassleader.CAS-003.v2021-08-06.by.gale.404q.pdf

Latest Upload: 117RedHat.EX200.v2026-06-25.q31; 174Microsoft.DP-100.v2026-06-25.q212; 195IIBA.ECBA.v2026-06-24.q96; 244Microsoft.AI-102.v2026-06-24.q184; 136Databricks.Databricks-Generative-AI-Engineer-Associate.v2026-06-24.q31; 132EMC.D-PDM-DY-23.v2026-06-24.q16; 262ECCouncil.312-50v13.v2026-06-24.q254; 143F5.F5CAB5.v2026-06-22.q29; 138Juniper.JN0-650.v2026-06-22.q31; 157Salesforce.Plat-Admn-201.v2026-06-22.q72

CAS-003 Exam Question 186

CAS-003 Exam Question 187

CAS-003 Exam Question 188

CAS-003 Exam Question 189

CAS-003 Exam Question 190

Download PDF File