Get real CAS-001 exam questions for better preparation

CompTIA CAS-001 Exam Overview:

CompTIA CAS-001 Exam Syllabus Topics:

CompTIA Advanced Security Practitioner Sample Questions:

1. A security researcher is about to evaluate a new secure VoIP routing appliance. The appliance manufacturer claims the new device is hardened against all known attacks and several un-disclosed zero day exploits. The code base used for the device is a combination of compiled C and TC/TKL scripts. Which of the following methods should the security research use to enumerate the ports and protocols in use by the appliance?

A) Switchport analyzer
B) Device fingerprinting
C) Grey box testing
D) Penetration testing

2. A data breach occurred which impacted the HR and payroll system. It is believed that an attack from within the organization resulted in the data breach. Which of the following should be performed FIRST after the data breach occurred?

A) Conduct a business impact analysis
B) Review NIDS logs
C) Assess system status
D) Restore from backup tapes

3. Company ABC has grown yearly through mergers and acquisitions. This has led to over 200 internal custom web applications having standalone identity stores. In order to reduce costs and improve operational efficiencies a project has been initiated to implement a centralized security infrastructure.
The requirements are as follows:
------
Reduce costs
Improve efficiencies and time to market
Manageable
Accurate identity information
Standardize on authentication and authorization
Ensure a reusable model with standard integration patterns
Which of the following security solution options will BEST meet the above requirements? (Select THREE).

A) Build an organization-wide fine grained access control model stored in a centralized policy data store.
B) Implement a web access control forward proxy and centralized directory model, providing coarse grained access control, and single sign-on capabilities.
C) Implement a web access control agent based model with a centralized directory model providing coarse grained access control and single sign-on capabilities.
D) Implement a web access controlled reverse proxy and centralized directory model providing coarse grained access control and single sign-on capabilities.
E) Implement automated provisioning of identity information; coarse grained, and fine grained access control.
F) Move each of the applications individual fine grained access control models into a centralized directory with fine grained access control.
G) Implement self service provisioning of identity information, coarse grained, and fine grained access control.

4. A security manager has provided a Statement of Work (SOW) to an external penetration testing firm for a web application security test. The web application starts with a very simple HTML survey form with two components: a country selection dropdown list and a submit button. The penetration testers are required to provide their test cases for this survey form in advance. In order to adequately test the input validation of the survey form, which of the following tools would be the BEST tool for the technician to use?

A) Port scanner
B) Vulnerability scanner
C) Fuzzer
D) HTTP interceptor

5. An administrator's company has recently had to reduce the number of Tier 3 help desk technicians available to support enterprise service requests. As a result, configuration standards have declined as administrators develop scripts to troubleshoot and fix customer issues. The administrator has observed that several default configurations have not been fixed through applied group policy or configured in the baseline. Which of the following are controls the administrator should recommend to the organization's security manager to prevent an authorized user from conducting internal reconnaissance on the organization's network? (Select THREE).

A) TLS
B) HIDS
C) NIDS
D) IdM
E) Network file system
F) Port security
G) BIOS security
H) Disable command execution
I) Search engine reconnaissance

Solutions: