Comptia certkiller comptia Casp Cas-004 Syllabus Exam Questions Answers by Maja q50 vce pdf

Page: 16 / 32

Exam Name:	CompTIA Advanced Security Practitioner (CASP+) Exam
Exam Code:	CAS-004 Dumps
Vendor:	CompTIA	Certification:	CompTIA CASP
Questions:	439 Q&A's	Shared By:	maja

Question 64

Which of the following objectives BEST supports leveraging tabletop exercises in business continuity planning?

Options:

Determine the optimal placement of hot/warm sites within the enterprise architecture.

Create new processes for identified gaps in continuity planning.

Establish new staff roles and responsibilities for continuity of operations.

Assess the effectiveness of documented processes against a realistic scenario.

Discussion

Question 65

A company created an external, PHP-based web application for its customers. A security researcher reports that the application has the Heartbleed vulnerability. Which of the following would BEST resolve and mitigate the issue? (Select TWO).

Options:

Deploying a WAF signature

Fixing the PHP code

Changing the web server from HTTPS to HTTP

UsingSSLv3

Changing the code from PHP to ColdFusion

Updating the OpenSSL library

Discussion

Answer:

A, F

Explanation:

Explanation:

Deploying a web application firewall (WAF) signature is a way to detect and block attempts to exploit the Heartbleed vulnerability on the web server. A WAF signature is a pattern that matches a known attack vector, such as a malicious heartbeat request. By deploying a WAF signature, the company can protect its web application from Heartbleed attacks until the underlying vulnerability is fixed.

Updating the OpenSSL library is the ultimate way to fix and mitigate the Heartbleed vulnerability. The OpenSSL project released version 1.0.1g on April 7, 2014, which patched the bug by adding a bounds check to the heartbeat function. By updating the OpenSSL library on the web server, the company can eliminate the vulnerability and prevent any future exploitation.

B. Fixing the PHP code is not a way to resolve or mitigate the Heartbleed vulnerability, because the vulnerability is not in the PHP code, but in the OpenSSL library that handles the SSL/TLS encryption for the web server.

C. Changing the web server from HTTPS to HTTP is not a way to resolve or mitigate the Heartbleed vulnerability, because it would expose all the web traffic to eavesdropping and tampering by attackers. HTTPS provides confidentiality, integrity, and authentication for web communications, and should not be disabled for security reasons.

D. Using SSLv3 is not a way to resolve or mitigate the Heartbleed vulnerability, because SSLv3 is an outdated and insecure protocol that has been deprecated and replaced by TLS. SSLv3 does not support modern cipher suites, encryption algorithms, or security features, and is vulnerable to various attacks, such as POODLE.

E. Changing the code from PHP to ColdFusion is not a way to resolve or mitigate the Heartbleed vulnerability, because the vulnerability is not related to the programming language of the web application, but to the OpenSSL library that handles the SSL/TLS encryption for the web server.

https://owasp.org/www-community/vulnerabilities/Heartbleed_Bug

https://heartbleed.com/

Question 66

A consultant needs access to a customer's cloud environment. The customer wants to enforce the following engagement requirements:

• All customer data must remain under the control of the customer at all times.

• Third-party access to the customer environment must be controlled by the customer.

• Authentication credentials and access control must be under the customer's control.

Which of the following should the consultant do to ensure all customer requirements are satisfied when accessing the cloud environment?

Options:

use the customer's SSO with read-only credentials and share data using the customer's provisioned secure network storage

use the customer-provided VDI solution to perform work on the customer's environment.

Provide code snippets to the customer and have the customer run code and securely deliver its output

Request API credentials from the customer and only use API calls to access the customer's environment.

Discussion

Question 67

A company was recently infected by malware. During the root cause analysis. the company determined that several users were installing their own applications. TO prevent further compromises, the company has decided it will only allow authorized applications to run on its systems. Which Of the following should the company implement?

Options:

Signing

Access control

HIPS

Permit listing

Discussion

Miley

Hey, I tried Cramkey Dumps for my IT certification exam. They are really awesome and helped me pass my exam with wonderful score.

Megan (not set)

That’s great!!! I’ll definitely give it a try. Thanks!!!

Alaya

Best Dumps among other dumps providers. I like it so much because of their authenticity.