Download 2021 Free CompTIA CASP CAS-003 Real Dumps

1. CAS-003 Sample Test CAS-003 Sample Test CompTIA Advanced Security CompTIA Advanced Security Practitioner (CASP) Practitioner (CASP) https://www.passcert.com/ https://www.passcert.com/CAS-003 CAS-003.html .html

2. Download Passcert latest CAS-003 Sample Test to help you pass successfully Question 1 A new database application was added to a company’s hosted VM environment. Firewall ACLs were modified to allow database users to access the server remotely. The company’s cloud security broker then identified abnormal from a database user on-site. Upon further investigation, the security team noticed the user ran code on a VM that provided access to the hypervisor directly and access to other sensitive data. Which of the following should the security do to help mitigate future attacks within the VM environment? (Choose two.) A. Install the appropriate patches. B. Install perimeter NGFW. C. Configure VM isolation. D. Deprovision database VM. E. Change the user’s access privileges. F. Update virus definitions on all endpoints. Answer: C,E 02 03 04

3. Download Passcert latest CAS-003 Sample Test to help you pass successfully Question 2 A penetration test is being scoped for a set of web services with API endpoints. The APIs will be hosted on existing web application servers. Some of the new APIs will be available to unauthenticated users, but some will only be available to authenticated users. Which of the following tools or activities would the penetration tester MOST likely use or do during the engagement? (Select TWO.) A. Static code analyzer B. Intercepting proxy C. Port scanner D. Reverse engineering E. Reconnaissance gathering F. User acceptance testing Answer: B,E 01 02 03 04

4. Download Passcert latest CAS-003 Sample Test to help you pass successfully Question 3 A systems administrator receives an advisory email that a recently discovered exploit is being used in another country and the financial institutions have ceased operations while they find a way to respond to the attack. Which of the following BEST describes where the administrator should look to find information on the attack to determine if a response must be prepared for the systems? (Choose two.) A. Bug bounty websites B. Hacker forums C. Antivirus vendor websites D. Trade industry association websites E. CVE database F. Company’s legal department Answer: B,D 01 02 03 04

5. Download Passcert latest CAS-003 Sample Test to help you pass successfully Question 4 Which of the following is the GREATEST security concern with respect to BYOD? A. The filtering of sensitive data out of data flows at geographic boundaries. B. Removing potential bottlenecks in data transmission paths. C. The transfer of corporate data onto mobile corporate devices. D. The migration of data into and out of the network in an uncontrolled manner. Answer: D 01 02 03 04

6. Download Passcert latest CAS-003 Sample Test to help you pass successfully Question 5 A security incident responder discovers an attacker has gained access to a network and has overwritten key system files with backdoor software. The server was reimaged and patched offline. Which of the following tools should be implemented to detect similar attacks? A. Vulnerability scanner B. TPM C. Host-based firewall D. File integrity monitor E. NIPS Answer: D 01 02 03 04

7. Download Passcert latest CAS-003 Sample Test to help you pass successfully Question 6 A system administrator recently conducted a vulnerability scan of the internet. Subsequently, the organization was successfully attacked by an adversary. Which of the following in the MOST likely explanation for why the organization network was compromised? A. There was a false positive since the network was fully patched. B. The system administrator did not perform a full system sun. C. The systems administrator performed a credentialed scan. D. The vulnerability database was not updated. Answer: C 01 02 03 04

8. Download Passcert latest CAS-003 Sample Test to help you pass successfully Question 7 A network printer needs Internet access to function. Corporate policy states all devices allowed on the network must be authenticated. Which of the following is the MOST secure method to allow the printer on the network without violating policy? A. Request an exception to the corporate policy from the risk management committee B. Require anyone trying to use the printer to enter their username and password C. Have a help desk employee sign in to the printer every morning D. Issue a certificate to the printer and use certificate-based authentication Answer: D 01 02 03 04

9. Download Passcert latest CAS-003 Sample Test to help you pass successfully Question 8 A Chief Information Security Officer (CISO) has created a survey that will be distributed to managers of mission-critical functions across the organization. The survey requires the managers to determine how long their respective units can operate in the event of an extended IT outage before the organization suffers monetary losses from the outage To which of the following is the survey question related? (Select TWO) A. Risk avoidance B. Business impact C. Risk assessment D. Recovery point objective E. Recovery time objective F. Mean time between failures Answer: B,D 01 02 03 04

10. Download Passcert latest CAS-003 Sample Test to help you pass successfully Question 9 A manufacturing company's security engineer is concerned a remote actor may be able to access the ICS that is used to monitor the factory lines. The security engineer recently proposed some techniques to reduce the attack surface of the ICS to the Chief Information Security Officer (CISO). Which of the following would BEST track the reductions to show the CISO the engineer's plan is successful during each phase? A. Conducting tabletop exercises to evaluate system risk B. Contracting a third-party auditor after the project is finished C. Performing pre- and post-implementation penetration tests D. Running frequent vulnerability scans during the project Answer: A 01 02 03 04

11. Download Passcert latest CAS-003 Sample Test to help you pass successfully Question 10 A project manager is working with a team that is tasked to develop software applications in a structured environment and host them in a vendor’s cloud- based infrastructure. The organization will maintain responsibility for the software but will not manage the underlying server applications. Which of the following does the organization plan to leverage? A. SaaS B. PaaS C. IaaS D. Hybrid cloud E. Network virtualization Answer: B 01 02 03 04

12. Thank you More Information, you can visit Passcert.com