CAS-004 - Set 7 (1of2)

On which of the following devices and processes did the ransomware originate?

• cpt-ws002, NO-AV.exe

• cpt-ws026, DearCry.exe

• cpt-ws018, powershell.exe

• cpt-ws026, NO-AV.exe

Which of the following solutions should the security architect recommend to reduce the time required to validate the certificate?

• Implementing OCSP stapling on the server

• Changing the cipher algorithm used on the web server

• Upgrading to TLS 1.3

• Adding more nodes to the web server clusters

Which of the following should the security analyst have followed to prevent the loss of potentially useful evidence during a security incident investigation?

• Verification

• Chain of custody

• Secure storage

• Order of volatility

Which of the following should the security administrator implement to detect a potential forged sender claim in the envelope of an email? (Select TWO)

• DMARC

• SPF

• S/MIME

• TLS

Which of the following will need to be implemented to achieve the transition to a zero trust architecture? (Select THREE)

• Continuous validation

• Policy automation

• Least privilege

• Firewall

Which of the following should the security analyst implement when considering mutual authentication?

• A common private key on each endpoint

• A common public key on each endpoint

• Public keys on both endpoints

• Perfect forward secrecy on both endpoints

Which of the following describes the system responsible for storing private encryption/decryption files with a third party to ensure these files are stored safely?

• Code signing

• Trust models

• TPM

• Key escrow

Which of the following BEST describes a common use case for homomorphic encryption?

• Maintaining the confidentiality of data both at rest and in transit to and from a CSP for processing

• Transmitting confidential data to a CSP for processing on a large number of resources without revealing information

• Storing proprietary data across multiple nodes in a private cloud to prevent access by unauthenticated users

• Processing data on a server after decrypting in order to prevent unauthorized access in transit

Which of the following would BEST meet the requirement of having close to zero defects and zero vulnerabilities in the CI/CD pipeline?

• Trusted open-source libraries

• A single code repository for all developers

• An open-source automation server

• A static code analyzer

Which of the following changes should the security architect make in the new system when replacing the company's monolithic software application with a containerized solution?

• Save secrets in key escrow

• Use a secrets management tool

• Run all Dockerfiles in a randomized namespace

• Store the secrets inside the Dockerfiles