Quiz
CASP+ Practice Test 2
Create a free account to finish this quiz
Save your progress and see your final score.
Already have an account? Sign in
Questions in this quiz (13)
1A vulnerability scanner detected an obsolete version of an open-source file-sharing application on one of a company’s Linux servers. While the software version is no longer supported by the OSS community, the company’s Linux vendor backported fixes, applied them for all current vulnerabilities, and agrees to support the software in the future. Based on this agreement, this finding is BEST categorized as a:
- Atrue positive.
- Btrue negative.
- Cfalse positive
- Dfalse negative.
2An enterprise is undergoing an audit to review change management activities when promoting code to production. The audit reveals the following:
-Some developers can directly publish code to the production environment.
-Static code reviews are performed adequately.
-Vulnerability scanning occurs on a regularly scheduled basis per policy.
Which of the following should be noted as a recommendation within the audit report?- AImplement short maintenance windows.
- BPerform periodic account reviews.
- CImplement job rotation.
- DImprove separation of duties.
3A security analyst sees that a hacker has discovered some keys and they are being made available on a public website. The security analyst is then able to successfully decrypt the data using the keys from the website. Which of the following should the security analyst recommend to protect the affected data?
- AKey rotation
- BKey revocation
- CKey escrow
- DZeroization
- ECryptographic obfuscation
4Over the last 90 days, many storage services has been exposed in the cloud services environments, and the security team does not have the ability to see is creating these instance. Shadow IT is creating data services and instances faster than the small security team can keep up with them. The Chief information security Officer (CIASO) has asked the security officer (CISO) has asked the security lead architect to architect to recommend solutions to this problem. Which of the following BEST addresses the problem best address the problem with the least amount of administrative effort?
- ACompile a list of firewall requests and compare than against interesting cloud services.
- BImplement a CASB solution and track cloud service use cases for greater visibility.
- CImplement a user-behavior system to associate user events and cloud service creation events.
- DCapture all log and feed then to a SIEM and then for cloud service events
5A developer wants to develop a secure external-facing web application. The developer is looking for an online community that produces tools, methodologies, articles, and documentation in the field of web-application security Which of the following is the BEST option?
- AICANN
- BPCI DSS
- COWASP
- DCSA
- ENIST
6A review of the past year’s attack patterns shows that attackers stopped reconnaissance after finding a susceptible system to compromise. The company would like to find a way to use this information to protect the environment while still gaining valuable attack information. Which of the following would be BEST for the company to implement?
- AA WAF
- BAn IDS
- CA SIEM
- DA honeypot
7A security engineer at a company is designing a system to mitigate recent setbacks caused competitors that are beating the company to market with the new products. Several of the products incorporate propriety enhancements developed by the engineer’s company. The network already includes a SEIM and a NIPS and requires 2FA for all user access. Which of the following system should the engineer consider NEXT to mitigate the associated risks?
- ADLP
- BMail gateway
- CData flow enforcement
- DUTM
8Which of the following is required for an organization to meet the ISO 27018 standard?
- AAll Pll must be encrypted.
- BAll network traffic must be inspected.
- CGDPR equivalent standards must be met
- DCOBIT equivalent standards must be met
9Technicians have determined that the current server hardware is outdated, so they have decided to throw it out. Prior to disposal, which of the following is the BEST method to use to ensure no data remnants can be recovered?
- ADrive wiping
- BDegaussing
- CPurging
- DPhysical destruction
10A systems administrator is in the process of hardening the host systems before connecting to the network. The administrator wants to add protection to the boot loader to ensure the hosts are secure before the OS fully boots. Which of the following would provide the BEST boot loader protection?
- ATPM
- BHSM
- CPKI
- DUEFI/BIOS
11A security architect is tasked with scoping a penetration test that will start next month. The architect wants to define what security controls will be impacted. Which of the following would be the BEST document to consult?
- ARules of engagement
- BMaster service agreement
- CStatement of work
- DTarget audience
12A health company has reached the physical and computing capabilities in its datacenter, but the computing demand continues to increase. The infrastructure is fully virtualized and runs custom and commercial healthcare application that process sensitive health and payment information. Which of the following should the company implement to ensure it can meet the computing demand while complying with healthcare standard for virtualization and cloud computing?
- AHybrid IaaS solution in a single-tenancy cloud
- BPass solution in a multinency cloud
- CSaaS solution in a community cloud
- DPrivate SaaS solution in a single tenancy cloud
13A security engineer needs to implement a solution to increase the security posture of user endpoints by providing more visibility and control over local administrator accounts. The endpoint security team is overwhelmed with alerts and wants a solution that has minimal operational burdens. Additionally, the solution must maintain a positive user experience after implementation. Which of the following is the BEST solution to meet these objectives?
- AImplement Privileged Access Management (PAM), keep users in the local administrators group, and enable local administrator account monitoring.
- BImplement PAM, remove users from the local administrators group, and prompt users for explicit approval when elevated privileges are required.
- CImplement EDR, remove users from the local administrators group, and enable privilege escalation monitoring.
- DImplement EDR, keep users in the local administrators group, and enable user behavior analytics.
Information
- Description
- Quiz on CASP+ Practice Test 2, created by Skyler Rogers on 06/03/2023.
- Author
- Skyler Rogers
- Language
- English
- Views
- 0
- Tags
- Rating
- No ratings yet Rate this quiz