CA1-005 Practice Test

CA1-005 Practice Test practice questions, page 5 of 5, with answer review and explanations.

Question 21

An organization's load balancers have reached EOL and are scheduled to be replaced. The organization identified a new, critical vulnerability that affects an unused function of the load balancers. Which of the following are the best ways to address the risk to the organization? (Choose two.)

  1. Request a risk acceptance for the vulnerability indefinitely.
  2. Request a risk acceptance for the vulnerability for 90 days.
  3. Exclude the devices from vulnerability scans.
  4. Do not allow any network traffic to or from the hardware.
  5. Disable the vulnerable service.
  6. Immediately decommission the hardware.

Question 22

A security engineer receives an alert from the SIEM platform indicating a possible malicious action on the internal network. The engineer generates a report that outputs the logs associated with the incident: Which of the following actions best enables the engineer to investigate further?

  1. Consulting logs from the enterprise password manager
  2. Searching dark web monitoring resources for exposure
  3. Reviewing audit logs from privileged actions
  4. Querying user behavior analytics data

Question 23

After an increase in adversarial activity, a company wants to implement security measures to mitigate the risk of a threat actor using compromised accounts to mask unauthorized activity. Which of the following is the best way to mitigate the issue?

  1. Web application firewall
  2. Threat intelligence platforms
  3. User and entity behavior analytics
  4. Reverse engineering