CompTIA CAS-005 Exam Questions & Answers

Correct Answer: AF

A. Implementing allow lists: Allow lists (whitelisting) restrict network communication to only authorized devices and applications, significantly reducing the attack surface by ensuring that only pre-approved traffic is permitted. F. Implementing a

site-to-site IPSec VPN: A site-to-site VPN provides a secure, encrypted tunnel for data transmission between the OT systems and the vendor, protecting the data from interception and tampering during transit.

Other options:

B. Monitoring network behavior: While useful for detecting anomalies, it does not proactively reduce the risk of compromise or sabotage. C. Encrypting data at rest: Important for protecting data stored on devices, but does not address network

communication risks. D. Performing boot integrity checks: Ensures the integrity of the system at startup but does not protect ongoing network communications. E. Executing daily health checks: Useful for maintaining system health but does

not directly reduce the risk of network-based compromise or sabotage.

References:

CompTIA Security+ Study Guide

NIST SP 800-82, "Guide to Industrial Control Systems (ICS) Security" "Industrial Network Security" by Eric D. Knapp and Joel Thomas Langill

Correct Answer: A

When creating a threat model to identify vulnerabilities in an organization's infrastructure, prioritizing external-facing infrastructure with known exploited vulnerabilities is critical.

Here's why:

Exposure to Attack: External-facing infrastructure is directly exposed to the internet, making it a primary target for attackers. Any vulnerabilities in this layer pose an immediate risk to the organization's security. Known Exploited Vulnerabilities:

Vulnerabilities that are already known and exploited in the wild are of higher concern because they are actively being used by attackers. Addressing these vulnerabilities reduces the risk of exploitation significantly. Risk Mitigation: By

prioritizing external-facing infrastructure with known exploited vulnerabilities, the organization can mitigate the most immediate and impactful threats, thereby improving overall security posture.

Correct Answer: D