CAS-001試験無料問題集「CompTIA Advanced Security Practitioner 認定」

An IT administrator has been tasked by the Chief Executive Officer with implementing security using a single device based on the following requirements:
1.Selective sandboxing of suspicious code to determine malicious intent.
2.VoIP handling for SIP and H.323 connections.
3.Block potentially unwanted applications.
Which of the following devices would BEST meet all of these requirements?

There has been a recent security breach which has led to the release of sensitive customer information. As part of improving security and reducing the disclosure of customer data, a training company has been employed to educate staff. Which of the following should be the primary focus of the privacy compliance training program?

As part of the ongoing information security plan in a large software development company, the Chief Information officer (CIO) has decided to review and update the company's privacy policies and procedures to reflect the changing business environment and business requirements.
Training and awareness of the new policies and procedures has been incorporated into the security awareness program which should be:

As a cost saving measure, a company has instructed the security engineering team to allow all consumer devices to be able to access the network. They have asked for recommendations on what is needed to secure the enterprise, yet offer the most flexibility in terms of controlling applications, and stolen devices. Which of the following is BEST suited for the requirements?

A mature organization with legacy information systems has incorporated numerous new processes and dependencies to manage security as its networks and infrastructure are modernized. The Chief Information Office has become increasingly frustrated with frequent releases, stating that the organization needs everything to work completely, and the vendor should already have those desires built into the software product. The vendor has been in constant communication with personnel and groups within the organization to understand its business process and capture new software requirements from users. Which of the following methods of software development is this organization's configuration management process using?

A court order has ruled that your company must surrender all the email sent and received by a certain employee for the past five years. After reviewing the backup systems, the IT administrator concludes that email backups are not kept that long. Which of the following policies MUST be reviewed to address future compliance?

CORRECT TEXT
You are a new security administrator at Company A.
You have the following network diagram and console window access to a single device on the network.
Gather the information required to fill in hostname, purpose and IP address(es) for each device on the diagram.
Instructions:
Type "help" at any command prompt for a list of available commands.
Each purpose will be used at LEAST once
Some purposes may be used multiple times.
Host names may only be used once.

正解:
Pending
Ann, a software developer, wants to publish her newly developed software to an online store. Ann wants to ensure that the software will not be modified by a third party or end users before being installed on mobile devices. Which of the following should Ann implement to stop modified copies of her software form running on mobile devices?

Which of the following is a security advantage of single sign-on? (Select TWO).