CompTIA CAS-005 Exam Questions & Answers

A company that relies on an COL system must keep it operating until a new solution is available

Which of the following is the most secure way to meet this goal?

A. Isolating the system and enforcing firewall rules to allow access to only required endpoints

B. Enforcing strong credentials and improving monitoring capabilities

C. Restricting system access to perform necessary maintenance by the IT team

D. Placing the system in a screened subnet and blocking access from internal resources

An organization developed a containerized application. The organization wants to run the application in the cloud and automatically scale it based on demand. The security operations team would like to use container orchestration but does not want to assume patching responsibilities. Which of the following service models best meets these requirements?

A. PaaS

B. SaaS

C. IaaS

D. MaaS

A commercial OSINT provider utilizes and reviews data from various sources of publicly available information. The provider is transitioning the subscription service to a model that limit's the scope of available data based on subscription tier. Which of the following approaches would best ensure subscribers are only granted access to data associated with their tier? (Choose two.)

A. Storing collected data on separate physical media per tier

B. Controlling access to data based on the role of users

C. Employing attribute-based access control

D. Implementing a behavior-based IDS positioned at the storage network gateway

E. Establishing a classification and labeling scheme

F. Implementing a mandatory access control scheme