CAS-005 Practice Test

Question 76

You are tasked with integrating a new B2B client application with an existing OAuth workflow that must meet the following requirements: • The application does not need to know the users’ credentials. • An approval interaction between the users and the HTTP service must be orchestrated. • The application must have limited access to users’ data. INSTRUCTIONS - Use the drop-down menus to select the action items for the appropriate locations. All placeholders must be filled. If at any time you would like to bring back the initial state of the simulation, please click the Reset All button.

Question 77

SIMULATION - An IPSec solution is being deployed. The configuration files for both the VPN concentrator and the AAA server are shown in the diagram. Complete the configuration files to meet the following requirements: • The EAP method must use mutual certificate-based authentication (with issued client certificates). • The IKEv2 cipher suite must be configured to the most secure authenticated mode of operation. • The secret must contain at least one uppercase character, one lowercase character, one numeric character, and one special character, and it must meet a minimum length requirement of eight characters. INSTRUCTIONS - Click on the AAA server and VPN concentrator to complete the configuration. Fill in the appropriate fields and make selections from the drop-down menus. If at any time you would like to bring back the initial state of the simulation, please click the Reset All button.

Question 78

SIMULATION - An incident occurred at Site A when an attacker successfully caused water pressure to increase in the pump room. The organization is concerned about reoccurrence of this attack and that similar attacks might be successful on other cyber-physical systems within the network. All devices and components reside on a flat network within the 10.1.0.0/16 space. INSTRUCTIONS - Take the appropriate actions to reduce the risk of reoccurrence of this and other environmental security vulnerabilities. Select the component(s) at Sites A and B that have environmental impact potential. Then, select the corrective action that will best reduce the risk of incident reoccurrence. If at any time you would like to bring back the initial state of the simulation, please click the Reset All button.

Question 79

SIMULATION - During the course of normal SOC operations, three anomalous events occurred and were flagged as potential IoCs. Evidence for each of these potential IoCs is provided. INSTRUCTIONS - Review each of the events and select the appropriate analysis and action options for each IoC. If at any time you would like to bring back the initial state of the simulation, please click the Reset All button.

Question 80

A security administrator needs to automate alerting. The server generates structured log files that need to be parsed to determine whether an alarm has been triggered. Given the following code function: Which of the following is most likely the log input that the code will parse?

2. <"error_log"><"system_1">
4. <"error_log": {"system_1": {"InAlarmState": True }}}