CA1-005 Practice Test

CA1-005 Practice Test practice questions, page 4 of 5, with answer review and explanations.

Question 16

The material findings from a recent compliance audit indicate a company has an issue with excessive permissions. The findings show that employees changing roles or departments results in privilege creep. Which of the following solutions are the best ways to mitigate this issue? (Choose two.)

  1. Setting different access controls defined by business area
  2. Implementing a role-based access policy
  3. Designing a least-needed privilege policy
  4. Establishing a mandatory vacation policy
  5. Performing periodic access reviews
  6. Requiring periodic job rotation

Question 17

During a recent audit, a company's systems were assessed. Given the following information: Which of the following is the best way to reduce the attack surface?

  1. Deploying an EDR solution to all impacted machines in manufacturing
  2. Segmenting the manufacturing network with a firewall and placing the rules in monitor mode
  3. Setting up an IDS inline to monitor and detect any threats to the software
  4. Implementing an application-aware firewall and writing strict rules for the application access

Question 18

The security team is receiving escalated support tickets stating that one of the company's publicly available websites is not loading as expected. Given the following observations: Which of the following is most likely the root cause?

  1. A certificate signed by a global root certification authority has expired.
  2. A protocol mismatch error is expected to occur when using outdated browsers.
  3. One certificate is being bound to multiple websites on the same server.
  4. Subject alternative names were not used appropriately for subdomains.

Question 19

A company implemented a new NAC solution based on 802.1X. However, the IT support team notices that some devices are not being enrolled in the new policies, causing access disruptions for key users. Which of the following solutions will most likely solve this issue and prevent reoccurrence?

  1. Include the monitoring agent and digital certificate as part of the patching/updating program, keeping all the corporate devices updated and enrolled.
  2. Check whether the certificate is signed by a certification authority and manually deployed to each device.
  3. Check all the devices without proper access, enrolling them via the solution agent and authenticating to the network.
  4. Implement default credentials to automate RADIUS authentication and grant access to the network if the device owner is an employee.

Question 20

An analyst wants to conduct a risk assessment on a new application that is being deployed. Given the following information: • Total budget allocation for the new application is unavailable. • Recovery time objectives have not been set. • Downtime loss calculations cannot be provided. Which of the following statements describes the reason a qualitative assessment is the best option?

  1. The analyst has previous work experience in application development.
  2. Sufficient metrics are not available to conduct other risk assessment types.
  3. An organizational risk register tracks all risks and mitigations across business units.
  4. The organization wants to find the monetary value of any outages.