SecurityX CAS 005 Day 3 APRIL 2025

How does software bill of materials (SBoM) improve software assurance?

An organization tags sensitive files. This supports which control?

System owners modify systems or applications in an ad hoc manner. What would cut the amount of failed updates?

A development team pushes insecure code via CI/CD. What’s a mitigation?

What enables real-time detection across a hybrid cloud environment?

What control strategy applies multiple overlapping safeguards?

Which threat targets AI models by modifying the training dataset?

A development team want to test a new software feature, prior to release into production, what is the best location?

An attacker uses AI to generate realistic phishing calls. What is this called?

Which component enhances security by monitoring mirrored network traffic?

A firm continuously monitors logs for anomalies. This is an example of?

In designing resilient systems, what benefits does horizontal scaling offer?

A security officer discovers that several employees were contacted by the same individual who impersonated a recruiter

What design enhances system availability during high customer throughput?

A business wants to implement a platform to better identify which specific assets are affected by a given vulnerability

A system reaches end-of-life. What’s the primary risk?

Which tool validates software components against known vulnerabilities?

What type of testing examines running applications for security flaws?

Users are writing down passwords, because of the number of passwords needed in an environment. What addresses this risk?

What is the role of an API gateway in secure system design?

A regulatory requirement is for MFA, currently User ID & password are in use. What would satisfy the new requirement.

What approach reduces the number of exploitable components?

An organization is looking for gaps in its detection capabilities based on the APTs that may target the industry

What is the purpose of runtime application self-protection (RASP)?

What country has the most cities, towns and villages called Moscow?

An organization deploys redundant systems across geographies. This supports?

An engineer needs to prevent data disclosure when encrypted SSDs are re-used within an enterprise? What is most secure?

A multinational firm uses a CDN. What risk does this mitigate?

Which best explains the business requirement a healthcare provider fulfills by encrypting patient data at rest?

What software tool ensures source-code meets secure coding best practices?

Why is legacy component integration risky in modern architectures?