CAS-004 Exam Question 166

An auditor Is reviewing the logs from a web application to determine the source of an Incident. The web application architecture Includes an Internet-accessible application load balancer, a number of web servers In a private subnet, application servers, and one database server In a tiered configuration. The application load balancer cannot store the logs. The following are sample log snippets:

Which of the following should the auditor recommend to ensure future incidents can be traced back to the sources?
  • CAS-004 Exam Question 167

    A company is looking for a solution to hide data stored in databases. The solution must meet the following requirements:
    Be efficient at protecting the production environment
    Not require any change to the application
    Act at the presentation layer
    Which of the following techniques should be used?
  • CAS-004 Exam Question 168

    A security consultant needs to set up wireless security for a small office that does not have Active Directory.
    Despite the lack of central account management, the office manager wants to ensure a high level of defense to prevent brute-force attacks against wireless authentication.
    Which of the following technologies would BEST meet this need?
  • CAS-004 Exam Question 169

    Which of the following represents the MOST significant benefit of implementing a passwordless authentication solution?
  • CAS-004 Exam Question 170

    A municipal department receives telemetry data from a third-party provider The server collecting telemetry sits in the municipal departments screened network and accepts connections from the third party over HTTPS. The daemon has a code execution vulnerability from a lack of input sanitization of out-of-bound messages, and therefore, the cybersecurity engineers would like to Implement nsk mitigations. Which of the following actions, if combined, would BEST prevent exploitation of this vulnerability? (Select TWO).