CAS-004 Exam Question 126
A remote user reports the inability to authenticate to the VPN concentrator.
During troubleshooting, a security administrate captures an attempted authentication and discovers the following being presented by the user's VPN client:
Which of the following BEST describes the reason the user is unable to connect to the VPN service?
During troubleshooting, a security administrate captures an attempted authentication and discovers the following being presented by the user's VPN client:
Which of the following BEST describes the reason the user is unable to connect to the VPN service?
CAS-004 Exam Question 127
A security engineer is reviewing a record of events after a recent data breach incident that involved the following:
- A hacker conducted reconnaissance and developed a footprint of the
company's Internet-facing web application assets.
- A vulnerability in a third-party library was exploited by the hacker, resulting in the compromise of a local account.
- The hacker took advantage of the account's excessive privileges to
access a data store and exfiltrate the data without detection.
Which of the following is the BEST solution to help prevent this type of attack from being successful in the future?
- A hacker conducted reconnaissance and developed a footprint of the
company's Internet-facing web application assets.
- A vulnerability in a third-party library was exploited by the hacker, resulting in the compromise of a local account.
- The hacker took advantage of the account's excessive privileges to
access a data store and exfiltrate the data without detection.
Which of the following is the BEST solution to help prevent this type of attack from being successful in the future?
CAS-004 Exam Question 128
An energy company is required to report the average pressure of natural gas used over the past quarter. A PLC sends data to a historian server that creates the required reports.
Which of the following historian server locations will allow the business to get the required reports in anOTand IT environment?
Which of the following historian server locations will allow the business to get the required reports in anOTand IT environment?
CAS-004 Exam Question 129
A security analyst notices a number of SIEM events that show the following activity:
Which of the following response actions should the analyst take FIRST?
Which of the following response actions should the analyst take FIRST?
CAS-004 Exam Question 130
During a remodel, a company's computer equipment was moved to a secure storage room with cameras positioned on both sides of the door. The door is locked using a card reader issued by the security team, and only the security team and department managers have access to the room. The company wants to be able to identify any unauthorized individuals who enter the storage room by following an authorized employee.
Which of the following processes would BEST satisfy this requirement?
Which of the following processes would BEST satisfy this requirement?