Free CompTIA CAS-005 Exam Dumps Questions & Answers

Company A is merging with Company B. Company A is a small, local company. Company B has a large, global presence. The two companies have a lot of duplication in their IT systems, processes, and procedures. On the new Chief Information Officer's (CIO's) first day, a fire breaks out at Company B's main data center. Which of the following actions should the CIO take first?

• A.  Ensure hot, warm, and mobile disaster recovery sites are available, and give an update to the companies' leadership teams.
• B.  Initiate Company A's IT systems processes and procedures, assess the damage, and perform a BIA.
• C.  Determine whether the incident response plan has been tested at both companies, and use it to respond.
• D.  Review the incident response plans, and engage the disaster recovery plan while relying on the IT leaders from both companies.

Which of the following utilizes policies that route packets to ensure only specific types of traffic are being sent to the correct destination based on application usage?

• A.  pcap
• B.  VPC
• C.  SDN
• D.  DNSSEC
• E.  vmstat

A security architect is investigating instances of employees who had their phones stolen in public places through seemingly targeted attacks. Devices are able to access company resources such as email and internal documentation, some of which can persist in application storage. Which of the following would best protect the company from information exposure? (Select two).

• A.  Leverage an MDM solution to prevent the side loading of mobile applications
• B.  Set up geofencing for corporate applications where the phone must be near an office
• C.  Implement a remote wipe procedure if the phone does not check in for a period of time
• D.  Use application control to restrict the applications that can be installed
• E.  Enforce biometric access control with configured timeouts
• F.  Enable device certificates that will be used for access to company resources

A security engineer must resolve a vulnerability in a deprecated version of Python for a custom- developed flight simulation application that is monitored and controlled remotely. The source code is proprietary and built with Python functions running on the Ubuntu operating system. Version control is not enabled for the application in development or production. However, the application must remain online in the production environment using built-in features. Which of the following solutions best reduces the attack surface of these issues and meets the outlined requirements?

• A.  Configure version designation within the Python interpreter. Update Python with aptitude, and update modules with pip in a test environment. Deploy the solution to production.
• B.  Configure code-signing within the CI/CD pipeline, update Python with aptitude, and update modules with pip in a test environment. Deploy the solution to production.
• C.  Enable branch protection in the GitHub repository. Update Python with aptitude, and update modules with pip in a test environment. Deploy the solution to production.
• D.  Use an NFS network share. Update Python with aptitude, and update modules with pip in a test environment. Deploy the solution to production.

Emails that the marketing department is sending to customers are going to the customers' spam folders. The security team is investigating the issue and discovers that the certificates used by the email server were reissued, but DNS records had not been updated. Which of the following should the security team update in order to fix this issue? (Choose three.)

• A.  SASC
• B.  DMARC
• C.  DKIM
• D.  DNSSEC
• E.  SPF
• F.  SAN
• G.  SOA
• H.  MX