CAS-004 practice questions, page 14 of 26, with answer review and explanations.
Question 66
A company has decided to purchase a license for software that is used to operate a mission-critical process. The third-party developer is new to the industry but is delivering what the company needs at this time. Which of the following BEST describes the reason why utilizing a source code escrow will reduce the operational risk to the company if the third party stops supporting the application?
The company will have access to the latest version to continue development.
The company will be able to force the third-party developer to continue support.
The company will be able to manage the third-party developer's development process.
The company will be paid by the third-party developer to hire a new development team.
Question 67
A security analyst is researching containerization concepts for an organization. The analyst is concerned about potential resource exhaustion scenarios on the Docker host due to a single application that is overconsuming available resources. Which of the following core Linux concepts BEST reflects the ability to limit resource allocation to containers?
Union filesystem overlay
Cgroups
Linux namespaces
Device mapper
Question 68
A developer wants to maintain integrity to each module of a program and ensure the code cannot be altered by malicious users. Which of the following would be BEST for the developer to perform? (Choose two.)
Utilize code signing by a trusted third party.
Implement certificate-based authentication.
Verify MD5 hashes.
Compress the program with a password.
Encrypt with 3DES.
Make the DACL read-only.
Question 69
A company is moving most of its customer-facing production systems to the cloud-facing production systems to the cloud. IaaS is the service model being used. The Chief Executive Officer is concerned about the type of encryption available and requires the solution must have the highest level of security. Which of the following encryption methods should the cloud security engineer select during the implementation phase?
Instance-based
Storage-based
Proxy-based
Array controller-based
Question 70
A vulnerability analyst identified a zero-day vulnerability in a company's internally developed software. Since the current vulnerability management system does not have any checks for this vulnerability, an engineer has been asked to create one. Which of the following would be BEST suited to meet these requirements?