Big 11.11 Sale 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: save70

SecurityX CAS-005 Full Course Free

Page: 3 / 24
Total 326 questions

CompTIA SecurityX Certification Exam Questions and Answers

Question 9

An organization recently implemented a policy that requires all passwords to be rotated every 90 days. An administrator observes a large volume of failed sign-on logs from multiple servers that are often accessed by users. The administrator determines users are disconnecting from the RDP session but not logging off. Which of the following should the administrator do to prevent account lockouts?

Options:

A.

Increase the account lockout threshold.

B.

Enforce password complexity.

C.

Automate logout of inactive sessions.

D.

Extend the allowed session length.

Question 10

An organization is planning for disaster recovery and continuity of operations.

INSTRUCTIONS

Review the following scenarios and instructions. Match each relevant finding to the affected host.

After associating scenario 3 with the appropriate host(s), click the host to select the appropriate corrective action for that finding.

Each finding may be used more than once.

If at any time you would like to bring back the initial state of the simul-ation, please click the Reset All button.

Options:

Question 11

An organization is looking for gaps in its detection capabilities based on the APTs that may target the industry Which of the following should the security analyst use to perform threatmodeling?

Options:

A.

ATT&CK

B.

OWASP

C.

CAPEC

D.

STRIDE

Question 12

A company developed a new solution that needs to track any changes to the data, and the changes need to be quickly identified. If any changes are attempted without prior approval, multiple events must be triggered, such as:

    Raising alerts

    Blocking the unapproved changes

    Quickly removing access to the data

Which of the following solutions best meets these requirements?

Options:

A.

Tracking all application logs, integrating them to the existing SIEM, flagging any changes, and making them visible on security dashboards

B.

Implementing a file integrity monitoring tool and integrating it via orchestration and automation with other security tools

C.

Introducing more granular access controls and allowing read-only access for non-privileged users

D.

Configuring CASB rules, making access to the data available only to authorized personnel

Page: 3 / 24
Total 326 questions