Free CompTIA CAS-002 Exam Dumps Questions & Answers

A security administrator is investigating the compromise of a SCADA network that is not physically connected to any other network. Which of the following is the MOST likely cause of the compromise?

• A.  SQL injection
• B.  Outdated antivirus definitions
• C.  Insecure wireless
• D.  Infected USB device

A business unit of a large enterprise has outsourced the hosting and development of a new external website which will be accessed by premium customers, in order to speed up the time to market timeline. Which of the following is the MOST appropriate?

• A.  The use of external organizations to provide hosting and web development services is not recommended as the costs are typically higher than what can be achieved internally. In addition, compliance with privacy regulations becomes more complex and guaranteed uptimes are difficult to track and measure.
• B.  Outsourcing transfers the risk to the third party, thereby minimizing the cost and any legal obligations. An MOU should be in place for the resolution of newly identified vulnerabilities and penetration / vulnerability testing should be conducted regularly.
• C.  The external party providing the hosting and website development should be obligated under contract to provide a secure service which is regularly tested (vulnerability and penetration). SLAs should be in place for the resolution of newly identified vulnerabilities and a guaranteed uptime.
• D.  Outsourcing transfers all the risk to the third party. An SLA should be in place for the resolution of newly identified vulnerabilities and penetration / vulnerability testing should be conducted regularly.

select id, firstname, lastname from authors
User input= firstname= Hack;man
lastname=Johnson
Which of the following types of attacks is the user attempting?

• A.  XML injection
• B.  Command injection
• C.  SQL injection
• D.  Cross-site scripting

A small company's Chief Executive Officer (CEO) has asked its Chief Security Officer (CSO) to improve the company's security posture quickly with regard to targeted attacks.
Which of the following should the CSO conduct FIRST?

• A.  Purchase multiple threat feeds to ensure diversity and implement blocks for malicious traffic.
• B.  Survey threat feeds from services inside the same industry.
• C.  Deploy a UTM solution that receives frequent updates from a trusted industry vendor.
• D.  Conduct an internal audit against industry best practices to perform a qualitative analysis.

A security engineer on a large enterprise network needs to schedule maintenance within a fixed window of time. A total outage period of four hours is permitted for servers.
Workstations can undergo maintenance from 8:00 pm to 6:00 am daily. Which of the following can specify parameters for the maintenance work? (Select TWO).

• A.  Quality of service
• B.  Memorandum of understanding
• C.  Operating level agreement
• D.  Managed security service
• E.  Network service provider