CAS-004 Exam Question 41

A company is implementing a new secure identity application, given the following requirements:
- The cryptographic secrets used in the application must never be
exposed to users or the OS
- The application must work on mobile devices.
- The application must work with the company's badge reader system
Which of the following mobile device specifications are required for this design? (Choose two.)
  • CAS-004 Exam Question 42

    Which of the following allows computation and analysis of data within a ciphertext without knowledge of the plaintext?
  • CAS-004 Exam Question 43

    A cybersecurity engineer analyst a system for vulnerabilities. The tool created an OVAL. Results document as output. Which of the following would enable the engineer to interpret the results in a human readable form? (Select TWO.)
  • CAS-004 Exam Question 44

    A security consultant was hired to audit a company's password are account policy. The company implements the following controls:
    - Minimum password length: 16
    - Maximum password age: 0
    - Minimum password age: 0
    - Password complexity: disabled
    - Store passwords in plain text: disabled
    - Failed attempts lockout: 3
    - Lockout timeout: 1 hour
    The password database uses salted hashes and PBKDF2. Which of the following is MOST likely to yield the greatest number of plain text passwords in the shortest amount of time?
  • CAS-004 Exam Question 45

    All staff at a company have started working remotely due to a global pandemic. To transition to remote work, the company has migrated to SaaS collaboration tools. The human resources department wants to use these tools to process sensitive information but is concerned the data could be:
    Leaked to the media via printing of the documents
    Sent to a personal email address
    Accessed and viewed by systems administrators
    Uploaded to a file storage site
    Which of the following would mitigate the department's concerns?