CAS-005 Practice Test practice questions, page 14 of 20, with answer review and explanations.
Question 66
A pharmaceutical company uses a cloud provider to host thousands of independent resources in object storage. The company needs a practical and effective means of discovering data, monitoring changes, and identifying suspicious activity. Which of the following would best meet these requirements?
A machine-learning-based data security service
A file integrity monitoring service
A cloud configuration assessment and compliance service
An automated data classification system
Question 67
A security analyst is assessing a new application written in Java. The security analyst must determine which vulnerabilities exist during runtime. Which of the following would provide the most exhaustive list of vulnerabilities while meeting the objective?
Input validation
Dynamic analysis
Side-channel analysis
Fuzz testing
Static analysis
Question 68
Recently, two large engineering companies in the same line of business decided to approach cyberthreats in a united way. Which of the following best describes this unified approach?
NDA
SOW
SLA
MOU
Question 69
A regulated company is in the process of refreshing its entire infrastructure. The company has a business-critical process running on an old 2008 Windows server. If this server fails, the company would lose millions of dollars in revenue. Which of the following actions should the company should take?
Accept the risk as the cost of doing business.
Create an organizational risk register for project prioritization.
Implement network compensating controls.
Purchase insurance to offset the cost if a failure occurred.
Question 70
A security engineer needs to ensure production containers are automatically scanned for vulnerabilities before they are accepted into the production environment. Which of the following should the engineer use to automatically incorporate vulnerability scanning on every commit?