Get Full Version of the Examhttp://www.EnsurePass.com/CAS-003.html Question No.131An information security manager is concerned that connectivity used to configure and troubleshoot critical network devices could be attacked. The manager has tasked anetworksecurity engineer with meeting the following requirements:Encrypt all traffic between the network engineer and critical devices. Segregate the different networking planes as much as possible.Do not let access ports impact configuration tasks.Which Read more [...]

Continue Reading

Get Full Version of the Examhttp://www.EnsurePass.com/CAS-003.html Question No.121An investigation showed a worm was introduced from an engineer#39;s laptop. It was determined the company does not provide engineers with company-owned laptops, which would be subject to a company policy and technical controls. Which of the following would be the MOST secure control implement?Deploy HIDS on all engineer-provided laptops, and put a new router in the management network.Implement role-based group policies Read more [...]

Continue Reading

Get Full Version of the Examhttp://www.EnsurePass.com/CAS-003.html Question No.111Given the following code snippet:Of which of the following is this snippet an example?Data execution preventionBuffer overflowFailure to use standard librariesImproper filed usageInput validationCorrect Answer: D Question No.112A ChiefInformation Security Officer (CISO) is reviewing the results of a gap analysis with an outside cybersecurity consultant. The gap analysis reviewed all procedural and technical controls Read more [...]

Continue Reading

Get Full Version of the Examhttp://www.EnsurePass.com/CAS-003.html Question No.101Which of the following is a feature of virtualization that can potentially create a single point of failure?Server consolidationLoad balancing hypervisorsFaster server provisioningRunning multiple OS instancesCorrect Answer: A Question No.102A medical facility wants to purchase mobile devices for doctors and nurses. To ensure accountability, each individual will be assigned a separate mobile device. Additionally, Read more [...]

Continue Reading

Get Full Version of the Examhttp://www.EnsurePass.com/CAS-003.html Question No.91After a large organization has completed the acquisition of a smaller company, the smaller company must implement new host-based security controls to connect its employees#39; devices to the network. Given that the network requires 802.1X EAP-PEAP to identify and authenticate devices, which of the following should the security administrator do to integrate the new employees#39; devices into the network securely?Distribute Read more [...]

Continue Reading

Get Full Version of the Examhttp://www.EnsurePass.com/CAS-003.html Question No.81Two new technical SMB security settings have beenenforced and have also become policies that increase secure communications.Network Client: Digitally sign communication Network Server: Digitally sign communicationA storage administrator in a remote location with a legacy storage array, which containstime- sensitive data, reports employees can no longer connect to their department shares. Which of the following mitigation Read more [...]

Continue Reading

Get Full Version of the Examhttp://www.EnsurePass.com/CAS-003.html Question No.71A systems security engineer is assisting an organization#39;s market survey team in reviewing requirements for an upcoming acquisition of mobile devices. The engineer expresses concerns to the survey team about a particular class of devices that uses a separate SoC for baseband radio I/O. For which of the following reasons is the engineer concerned?These devices can communicate over networks older than HSPA and LTE Read more [...]

Continue Reading

Get Full Version of the Examhttp://www.EnsurePass.com/CAS-003.html Question No.61A security analyst has requested network engineers integrate sFlow into the SOC#39;s overall monitoring picture. For this to be a useful addition to the monitoring capabilities, which of the following must be considered by the engineering team?Effective deployment of network tapsOverall bandwidth available at Internet PoPOptimal placement of log aggregatorsAvailability of application layer visualizersCorrect Answer: Read more [...]

Continue Reading

Get Full Version of the Examhttp://www.EnsurePass.com/CAS-003.html Question No.51A company#39;s existing forward proxies supportsoftware-based TLS decryption, but are currently at 60% load just dealing with AV scanning and content analysis for HTTP traffic. More than 70% outbound web traffic is currently encrypted. The switching and routing network infrastructure precludes adding capacity, preventing the installation of a dedicated TLS decryption system. The network firewall infrastructure is Read more [...]

Continue Reading

Get Full Version of the Examhttp://www.EnsurePass.com/CAS-003.html Question No.41A cybersecurity analyst has received an alert that well-known quot;call homequot; messages are continuously observed by network sensors at the network boundary. The proxy firewall successfully drops the massages. After determining the alert was a true positive, whichof the following represents OST likely cause?Attackers are running reconnaissance on company resources.An outside command and control system is attempting Read more [...]

Continue Reading

Get Full Version of the Examhttp://www.EnsurePass.com/CAS-003.html Question No.31An enterprise with global sites processes and exchanges highly sensitive information that is protected under several countries#39; arms trafficking laws. There is newinformation that malicious nation-state-sponsored activities are targeting the use of encryption between the geographically disparate sites. The organization currently employs ECDSA and ECDH with P-384, SHA-384, and AES-256-GCM on VPNs between sites. Read more [...]

Continue Reading