CompTIA CAS 005 Week 2 Day 2

What is the capital of Canada?

What is the benefit of using MITRE ATT&CK in security operations?

What advantage does TAXII provide when integrated with STIX?

Which tool is commonly used for endpoint behavior analytics?

A media company wants real-time threat intelligence updates. What supports this?

Which vulnerability arises from third-party library with embedded hard-coded credentials?

A web server accepts user input directly into file paths. What should be implemented to prevent exploits?

A security engineer is testing a new hypervisor update. What risk exists if not signed?

A cloud provider integrates CSPM with its SIEM. What is the expected outcome?

A vulnerability scan finds a deprecated function in a library. What risk is introduced?

What method protects against memory corruption and race conditions in modern apps?

A retail company needs visibility into application vulnerabilities. What data source is most relevant?

A healthcare provider needs to ensure alerts from MRI devices are processed. What condition must be met?

What metric has the most importance when prioritizing incident response?

What is the goal of the 'containment' phase in incident response?

Security engineers need to reduce false positives in the siem alerting system. What is the most appropriate action?

Which technology aggregates and analyzes log data in real time?

A remote server leaks sensitive credentials in plaintext. What should be done?

What is the primary purpose of threat hunting?

A cloud provider's SOC team integrates vulnerability scan data into its alerting system. What benefit does this provide?

An e-voting system must ensure integrity of results. What should be implemented?

An organization wants to implement a platform to better identify which specific assets are affected by vulnerabilities

An e-commerce company needs to comply with PCI DSS and maintain log retention. What must they ensure?

Which tool enables automated enrichment of alerts with threat intelligence?

What cipher suite should be chosen for the banks site-to-site VPN connection

What is the capital city of Australia

A manufacturer needs to detect malware communicating with external C2 servers. Which method helps?

An attacker uses serialized objects to bypass input filters. What is the threat type?

Which of the following best defines the kill chain framework?

Which mitigation should be applied to protect firmware on IoT devices?

A system relies on unsafe memory use for speed. What is the associated risk?

A government agency needs to detect outlier behavior among users. What tool supports this analysis?

What city has the most fish and chip shops that will cover mars bars in batter and deep fry them

Which analytics method helps detect slow, progressive attacks over time?

What metric helps analysts determine the priority of a detected threat?

What mitigation helps prevent cross-site scripting (XSS)?

An e-commerce platform includes outdated open-source plugins. What should be enforced?

A security operations analyst is tuning alerting rules. What outcome should be avoided?

An organization wants to create a threat model to identity vulnerabilities in its infrastructure. What is the priority

An internal app exposes hidden fields through insecure serialization. What risk exists?

A security analyst detects high outbound traffic from a low-usage server. What is the likely scenario?

Which technique validates that a downloaded update comes from a trusted source?

Which process converts raw alerts into actionable intelligence?

What is a secure design principle to minimize system attack surface when supporting software installations?

An enterprise receives multiple alerts for the same root cause. What technique helps reduce alert noise?

Which condition creates a race condition vulnerability?

A law firm is preparing for litigation and needs to preserve data. What must they enforce?

An IT team receives alerts after hours but fails to act. What control could improve response?

A user experiences a DoS attack. What architectural feature can help reduce impact?

An publisher wants to allow users to request that untruthful data be redacted to comply with the right to be forgotten

Which data source is best for detecting lateral movement within an enterprise network?

A development team fails to securely store API keys. What mitigation reduces risk?

What technique improves SOC analyst decision-making using data visualization?

Which term refers to a false indication of a threat where none exists?