CAS-005 Practice Test practice questions, page 10 of 20, with answer review and explanations.
Question 46
A security officer is requiring all personnel working on a special project to obtain a security clearance requisite with the level of all information being accessed. Data on this network must be protected at the same level of each clearance holder. The need to know must be verified by the data owner. Which of the following should the security officer do to meet these requirements?
Create a rule to authorize personnel only from certain IPs to access the files.
Assign labels to the files and require formal access authorization.
Assign attributes to each file and allow authorized users to share the files.
Assign roles to users and authorize access to files based on the roles.
Question 47
A security team receives alerts regarding impossible travel and possible brute-force attacks after normal business hours. After reviewing more logs, the team determines that specific users were targeted and attempts were made to transfer data to an unknown site. Which of the following should the team do to help mitigate these issues?
Create a firewall rule to prevent those users from accessing sensitive data.
Restrict uploading activity to only authorized sites.
Enable packet captures to continue to run for the source and destination related to the file transfer.
Disable login activity for those users after business hours.
Question 48
A company recently acquired a SaaS company and performed a gap analysis. The results of the gap analysis Indicate security controls are absent throughout the SDLC and have led to several vulnerable production releases. Which of the following security tools best reduces the risk of vulnerable code being pushed to production in the future?
Static application security testing
Regression testing
Code signing
Sandboxing
Question 49
Which of the following is the best reason for obtaining file hashes from a confiscated laptop?
To prevent metadata tampering on each file
To later validate the integrity of each file
To generate unique identifiers for each file
To preserve the chain of custody of files
Question 50
A security analyst is using data provided from a recent penetration test to calculate CVSS scores to prioritize remediation. Which of the following metric groups would the analyst need to determine to get the overall scores? (Choose three.)