Question 1

A central bank implements strict risk mitigations for the hardware supply chain, including an allow list for specific countries of origin. Which of the following best describes the cyberthreat to the bank?

Options :

A : Ability to obtain components during wartime

B : Fragility and other availability attacks

C : Physical Implants and tampering

D : Non-conformance to accepted manufacturing standards

Answer: C

Question 2

A company wants to install a three-tier approach to separate the web. database, and application servers A security administrator must harden the environment which of the following is the best solution?

Options :

A : Deploying a VPN to prevent remote locations from accessing server VLANs

B : Configuring a SASb solution to restrict users to server communication

C : Implementing microsegmentation on the server VLANs

D : installing a firewall and making it the network core

Answer: C

Question 3

A vulnerability can on a web server identified the following:

Which of the following actions would most likely eliminate on path decryption attacks? (Select two).

Options :

A : Disallowing cipher suites that use ephemeral modes of operation for key agreement

B : Removing support for CBC-based key exchange and signing algorithms

C : Adding TLS_ECDHE_ECDSA_WITH_AE3_256_GCMS_HA256

D : Implementing HIPS rules to identify and block BEAST attack attempts

E : Restricting cipher suites to only allow TLS_RSA_WITH_AES_128_CBC_SHA

F : Increasing the key length to 256 for TLS_RSA_WITH_AES_128_CBC_SHA

Answer: B,C

Question 4

After remote desktop capabilities were deployed in the environment, various vulnerabilities were noticed. • Exfiltration of intellectual property • Unencrypted files • Weak user passwords Which of the following is the best way to mitigate these vulnerabilities? (Select two).

Options :

A : Implementing data loss prevention

B : Deploying file integrity monitoring

C : Restricting access to critical file services only

D : Deploying directory-based group policies

E : Enabling modem authentication that supports MFA

F : Implementing a version control system

G : Implementing a CMDB platform

Answer: A,E

Question 5

A network engineer must ensure that always-on VPN access is enabled Curt restricted to company assets Which of the following best describes what the engineer needs to do''

Options :

A : Generate device certificates using the specific template settings needed

B : Modify signing certificates in order to support IKE version 2

C : Create a wildcard certificate for connections from public networks

D : Add the VPN hostname as a SAN entry on the root certificate

Answer: A

Smartly Prepare Exam with Free Online CAS-005 Practice Test

Buying Options: