CAS-004 Exam Question 51

An organization is implementing a new identity and access management architecture with the following objectives:
Supporting MFA against on-premises infrastructure
Improving the user experience by integrating with SaaS applications
Applying risk-based policies based on location
Performing just-in-time provisioning
Which of the following authentication protocols should the organization implement to support these requirements?
  • CAS-004 Exam Question 52

    An auditor needs to scan documents at rest for sensitive text. These documents contain both text and Images. Which of the following software functionalities must be enabled in the DLP solution for the auditor to be able to fully read these documents? (Select TWO).
  • CAS-004 Exam Question 53

    An organization is assessing the security posture of a new SaaS CRM system that handles sensitive Pll and identity information, such as passport numbers. The SaaS CRM system does not meet the organization's current security standards. The assessment identifies the following:
    1- There will be a $20,000 per day revenue loss for each day the system is delayed going into production.
    2- The inherent risk is high.
    3- The residual risk is low.
    4- There will be a staged deployment to the solution rollout to the contact center.
    Which of the following risk-handling techniques will BEST meet the organization's requirements?
  • CAS-004 Exam Question 54

    A company that all mobile devices be encrypted, commensurate with the full disk encryption scheme of assets, such as workstation, servers, and laptops. Which of the following will MOST likely be a limiting factor when selecting mobile device managers for the company?
  • CAS-004 Exam Question 55

    Based on PCI DSS v3.4, One Particular database field can store data, but the data must be unreadable. which of the following data objects meets this requirement?