Online Access Free CAS-005 Exam Questions

A company developed a new solution that needs to track any changes to the data, and the changes need to be quickly identified. If any changes are attempted without prior approval, multiple events must be triggered, such as:
- Raising alerts
- Blocking the unapproved changes
- Quickly removing access to the data
Which of the following solutions best meets these requirements?

• A.Tracking all application logs, integrating them to the existing SIEM, flagging any changes, and making them visible on security dashboards
• B.Configuring CASB rules, making access to the data available only to authorized personnel
• C.Introducing more granular access controls and allowing read-only access for non-privileged users
• D.Implementing a file integrity monitoring tool and integrating it via orchestration and automation with other security tools

A security consultant has been asked to recommend best practices for preserving digital evidence. Which of the following can be used to show the evidence has not been tampered with?

• A.Legal hold
• B.Hash value
• C.E-discovery
• D.Checksum

Engineers are unable to control pumps at Site A from Site B when the SCADA controller at Site A experiences an outage. A security analyst must provide a secure solution that ensures Site A pumps can be controlled by a SCADA controller at Site B if a similar outage occurs again. Which of the following represents the most cost-effective solution?

• A.Isolate the OT environment by providing an air-gapped network segment. Place the SCADA controller for each site in this network segment to minimize outages.
• B.Install backup SCADA controllers at each site, isolate them from the OT network, and assign these backup controllers as high-availability pairs.
• C.Procure direct fiber connectivity between Site A and Site B and limit its use to the critical SCADA controller traffic only.
• D.Configure VPN concentrators inside the OT network segments at Site A and Site B and allow the controllers to act as secondary devices for the other site's pumps across this encrypted tunnel.

Which of the following security risks should be considered as an organization reduces cost and increases availability of services by adopting serverless computing?

• A.Type of virtualization or emulation technology used in the provisioning of services
• B.Use of third-party monitoring of service provisioning and configurations
• C.Vertical scalability of the infrastructure underpinning the serverless offerings
• D.Level of control and influence governments have over cloud service providers

A malicious actor exploited firmware vulnerabilities and used rootkits in an attack on an organization. After the organization recovered from the incident, an engineer needs to recommend a solution that reduces the likelihood of the same type of attack in the future. Which of the following is the most relevant solution?

• A.Implementing measured boot
• B.Enabling software integrity checks
• C.Configuring host-based encryption
• D.Installing self-encrypting drives