Online Access Free CAS-004 Exam Questions

A recent data breach revealed that a company has a number of files containing customer data across its storage environment. These files are individualized for each employee and are used in tracking variouscustomer orders, inquiries, and issues. The files are not encrypted and can be accessed by anyone. The senior management team would like to address these issues without interrupting existing processes.
Which of the following should a security architect recommend?

• A.A DLP program to identify which files have customer data and delete them
• B.A CMDB to report on systems that are not configured to security baselines
• C.A CRM application to consolidate the data and provision access based on the process and need
• D.An ERP program to identify which processes need to be tracked

A satellite communications ISP frequently experiences outages and degraded modes of operation over one of its legacy satellite links due to the use of deprecated hardware and software. Three days per week, on average, a contracted company must follow a checklist of 16 different high-latency commands that must be run in serial to restore nominal performance. The ISP wants this process to be automated.
Which of the following techniques would be BEST suited for this requirement?

• A.Replace the associated hardware.
• B.Reduce link latency on the affected ground and satellite segments.
• C.Deploy SOAR utilities and runbooks.
• D.Provide the contractors with direct access to satellite telemetry data.

Which of the following should be established when configuring a mobile device to protect user internet privacy, to ensure the connection is encrypted, and to keep user activity hidden? (Select TWO).

• A.MAC address randomization
• B.Tunneling
• C.MDM
• D.RDP
• E.proxy
• F.VDI

A security administrator is trying to securely provide public access to specific data from a web application.
Clients who want to access the application will be required to:
* Only allow the POST and GET options.
* Transmit all data secured with TLS 1.2 or greater.
* Use specific URLs to access each type of data that is requested.
* Authenticate with a bearer token.
Which of the following should the security administrator recommend to meet these requirements?

• A.Application load balancer
• B.API gateway
• C.Reverse proxy
• D.Web application firewall

A security analyst received the following finding from a cloud security assessment tool:
Virtual Machine Data Disk is encrypted with the default encryption key.
Because the organization hosts highly sensitive data files, regulations dictate it must be encrypted so it is unreadable to the CSP. Which of the following should be implemented to remediate the finding and meet the regulatory requirement? (Select two).

• A.Disk encryption with customer-provided keys
• B.Disk encryption with keys from a third party
• C.File-level encryption with cloud vendor-provided keys
• D.File-level encryption with customer-provided keys
• E.Row-level encryption with a key escrow
• F.Disk-level encryption with a cross-signed certificate