CAS-005 試験問題を無料オンラインアクセス

A security analyst received the following finding from a cloud security assessment tool:
Virtual Machine Data Disk is encrypted with the default encryption key.
Because the organization hosts highly sensitive data files, regulations dictate it must be encrypted so It is unreadable to the CSP. Which of the following should be implemented to remediate the finding and meet the regulatory requirement? (Choose two.)

• A.Row-level encryption with a key escrow
• B.Disk-level encryption with a cross-signed certificate
• C.File-level encryption with cloud vendor-provided keys
• D.Disk encryption with keys from a third party
• E.Disk encryption with customer-provided keys
• F.File-level encryption with customer-provided keys

A company's headquarters is in an area with a high rate of severe weather. An engineer must update the enterprise architecture to meet the following requirements:
- Critical services must remain functional without downtime.
- Backups of data and configurations must be securely implemented.
- Company workstations must be highly available and remotely reachable.
Which of the following solutions is the best way to meet these requirements?

• A.Implement a geographically distributed allocation of physical resources and VDI with continuous replication connected via site-to-site and load-balanced IPSec VPNs.
• B.Lease a cross-country workspace to support as-needed relocation of staff and equipment, and continuously back up and test VM images with automatic recovery orchestration.
• C.Transition physical resources to virtual resources with standby redundant servers, and install a high capacity, diesel-powered backup generator.
• D.Open and staff a second data center at least 100 miles away with robust, network-attached storage, and include DAR encryption for offline backups of customer data to enable rapid recovery.

A security engineer needs to select the architecture for a cloud database that will protect an organization's sensitive data. The engineer has a choice between a single-tenant or a multitenant database architecture offered by a cloud vendor. Which of the following best describes the security benefits of the single-tenant option? (Choose two.)

• A.Ease of backup and restoration
• B.Most cost-effective
• C.High degree of privacy
• D.Low resilience to side-channel attacks
• E.Increased geographic diversity
• F.Full control and ability to customize

A global organization is reviewing potential vendors to outsource a critical payroll function. Each vendor's plan includes using local resources in multiple regions to ensure compliance with all regulations. The organization's Chief Information Security Officer is conducting a risk assessment on the potential outsourcing vendors' subprocessors. Which of the following best explains the need for this risk assessment?

• A.Specific regulatory requirements must be met in each jurisdiction.
• B.Risk mitigations must be more comprehensive than the existing payroll provider.
• C.Due care must be exercised during all procurement activities.
• D.The responsibility of protecting PII remains with the organization.

A company finds logs with modified time stamps when compared to other systems. The security team decides to improve logging and auditing for incident response. Which of the following should the team do to best accomplish this goal?

• A.Implement a central logging server, allowing only log ingestion.
• B.Rotate and back up logs every 24 hours, encrypting the backups.
• C.Change the log solution and integrate it with the existing SIEM.
• D.Integrate a file-monitoring tool with the SIEM.