CAS-005 Practice Test

CAS-005 Practice Test practice questions, page 17 of 20, with answer review and explanations.

Question 81

A financial technology firm works collaboratively with business partners in the industry to share threat intelligence within a central platform. This collaboration gives partner organizations the ability to obtain and share data associated with emerging threats from a variety of adversaries. Which of the following should the organization most likely leverage to facilitate this activity? (Choose two.)

  1. CWPP
  2. YARA
  3. ATT&CK
  4. STIX
  5. TAXII
  6. JTAG

Question 82

A company wants to invest in research capabilities with the goal to operationalize the research output. Which of the following is the best option for a security architect to recommend?

  1. Dark web monitoring
  2. Threat intelligence platform
  3. Honeypots
  4. Continuous adversary emulation

Question 83

A company is concerned about the security of customer data. The IT department has configured all web applications with appropriate access controls to restrict to only authorized users. Which of the following solutions addresses this concern?

  1. SIEM
  2. Vulnerability scanner
  3. DLP
  4. Threat intelligence platform

Question 84

A security analyst reviews the following report: Which of the following assessments is the analyst performing?

  1. System
  2. Supply chain
  3. Quantitative
  4. Organizational

Question 85

A security researcher tells a company that one of its solutions is vulnerable to buffer overflow, leading to a malicious coding execution. Which of the following is the best way to avoid this vulnerability in future versions?

  1. Testing for CSRF vulnerabilities before the application goes to production
  2. Using SAST tools to find vulnerabilities as part of the pipeline
  3. Implementing canary protection in an earlier life-cycle stage
  4. Implementing pair programming to improve development capabilities