CAS-004 Exam Question 361
A security analyst runs a vulnerability scan on a network administrator's workstation.
The network administrator has direct administrative access to the company's SSO web portal.
The vulnerability scan uncovers cntical vulnerabilities with equally high CVSS scores for the user's browser, OS, email client and an offline password manager.
Which of the following should the security analyst patch FIRST?
The network administrator has direct administrative access to the company's SSO web portal.
The vulnerability scan uncovers cntical vulnerabilities with equally high CVSS scores for the user's browser, OS, email client and an offline password manager.
Which of the following should the security analyst patch FIRST?
CAS-004 Exam Question 362
A security engineer is performing a threat modeling procedure against a machine learning system that correlates analytic information for decision support. Which of the following threat statements most likely applies to this type of system?
CAS-004 Exam Question 363
A company with customers in the United States and Europe wants to ensure its content is delivered to end users with low latency. Content includes both sensitive and public information. The company's data centers are located on the West Coast of the United States. Users on the East Coast of the United States and users in Europe are experiencing slow application response. Which of the following would allow the company to improve application response quickly?
CAS-004 Exam Question 364
A threat analyst notices the following URL while going through the HTTP logs.
Which of the following attack types is the threat analyst seeing?
Which of the following attack types is the threat analyst seeing?
CAS-004 Exam Question 365
A penetration tester obtained root access on a Windows server and, according to the rules of engagement, is permitted to perform post-exploitation for persistence.
Which of the following techniques would BEST support this?
Which of the following techniques would BEST support this?