CAS-004

CAS-004 practice questions, page 26 of 26, with answer review and explanations.

Question 126

A company is looking for a solution to hide data stored in databases. The solution must meet the following requirements: ✑ Be efficient at protecting the production environment ✑ Not require any change to the application ✑ Act at the presentation layer Which of the following techniques should be used?

  1. Masking
  2. Tokenization
  3. Algorithmic
  4. Random substitution

Question 127

A forensic expert working on a fraud investigation for a US-based company collected a few disk images as evidence. Which of the following offers an authoritative decision about whether the evidence was obtained legally?

  1. Lawyers
  2. Court
  3. Upper management team
  4. Police

Question 128

Technicians have determined that the current server hardware is outdated, so they have decided to throw it out. Prior to disposal, which of the following is the BEST method to use to ensure no data remnants can be recovered?

  1. Drive wiping
  2. Degaussing
  3. Purging
  4. Physical destruction

Question 129

A penetration tester obtained root access on a Windows server and, according to the rules of engagement, is permitted to perform post-exploitation for persistence. Which of the following techniques would BEST support this?

  1. Configuring systemd services to run automatically at startup
  2. Creating a backdoor
  3. Exploiting an arbitrary code execution exploit
  4. Moving laterally to a more authoritative server/service