CAS-004 Exam Question 151

A security analyst is evaluating the security of an online customer banking system. The analyst has a 12-character password for the test account. At the login screen, the analyst is asked to enter the third, eighth, and eleventh characters of the password. Which of the following describes why this request is a security concern? (Choose two.)
  • CAS-004 Exam Question 152

    A company requires a task to be carried by more than one person concurrently. This is an example of:
  • CAS-004 Exam Question 153

    An organization requires a contractual document that includes
    * An overview of what is covered
    * Goals and objectives
    * Performance metrics for each party
    * A review of how the agreement is managed by all parties
    Which of the following BEST describes this type of contractual document?
  • CAS-004 Exam Question 154

    Device event logs sources from MDM software as follows:

    Which of the following security concerns and response actions would BEST address the risks posed by the device in the logs?
  • CAS-004 Exam Question 155

    A developer is creating a new mobile application for a company. The application uses REST API and TLS 1.2 to communicate securely with the external back-end server. Due to this configuration, the company is concerned about HTTPS interception attacks.
    Which of the following would be the BEST solution against this type of attack?