CAS-003 試験問題を無料オンラインアクセス

A security team wants to keep up with emerging threats more efficiently by automating NIDS signature development and deployment Which of the following approaches, would BEST support this objective?

• A.Monitor cyberthreat newsgroups and translate articles into IDSIPS rulesets
• B.Use open-source intelligence sources to gather current information on adversary networks/systems
• C.Subscribe to a commercial service provider that publishes IOCs
• D.Configure NIDS to operate inline and use a DNS whitelist

A company recently deployed an agent-based DLP solution to all laptop in the environment. The DLP solution is configured to restrict the following:
* USB ports
* FTP connections
* Access to cloud-based storage sites
* Outgoing email attachments
* Saving data on the local C: drive
Despite these restrictions, highly confidential data was from a secure fileshare in the research department. Which of the following should the security team implement FIRST?

• A.Application whitelisting for all company-owned devices
• B.NIDS/NIPS on the network segment used by the research department
• C.A secure VDI environment for research department employees
• D.Bluetooth restriction on all laptops

An organization enables BYOD but wants to allow users to access the corporate email, calendar, and contacts from their devices. The data associated with the user's accounts is sensitive, and therefore, the organization wants to comply with the following requirements:
Active full-device encryption
Enabled remote-device wipe
Blocking unsigned applications
Containerization of email, calendar, and contacts
Which of the following technical controls would BEST protect the data from attack or loss and meet the above requirements?

• A.Require frequent password changes and disable NFC.
• B.Enforce device encryption and activate MAM.
• C.Install a mobile antivirus application.
• D.Configure and monitor devices with an MDM.

A software company tripled its workforce by hiring numerous early career developers out of college. The senior development team has a long-running history of secure coring mostly through experience and extensive peer review and recognizes it would be ^feasible to train the new staff without halting development operations Therefore the company needs a strategy that will integrate training on secure code writing while reducing the impact to operations Which of the following will BEST achieve this goal?

• A.Deploy static analysis and quality plugins into IDEs
• B.Give employees a book on the company coring standards
• C.Enroll new employees in a certification course on software assurance
• D.Roll out an automated testing and retesting framework

An organization is struggling to differentiate threats from normal traffic and access to systems. A security engineer has been asked to recommend a system that will aggregate data and provide metrics that will assist in identifying malicious actors or other anomalous activity throughout the environment. Which of the following solutions should the engineer recommend?

• A.IPS
• B.SIEM
• C.File integrity monitor
• D.Web application firewall
• E.UTM