CAS-005 Practice Test practice questions, page 19 of 20, with answer review and explanations.
Question 91
A company is adopting microservice architecture in order to quickly remediate vulnerabilities and deploy to production. All of the microservices run on the same Linux platform. Significant time was spent updating the base OS before deploying code. Which of the following should the company do to make the process efficient?
Use Terraform scripts while creating golden images.
Create a cron job to run apt-update every 30 days.
Use snapshots to deploy code to existing compute instances.
Deploy a centralized update server.
Question 92
During a gap assessment, an organization notes that BYOD usage is a significant risk. The organization implemented administrative policies prohibiting BYOD usage. However, the organization has not implemented technical controls to prevent the unauthorized use of BYOD assets when accessing the organization's resources. Which of the following solutions should the organization implement to best reduce the risk of BYOD devices? (Choose two.)
Cloud IAM, to enforce the use of token-based MFA
Conditional access, to enforce user-to-device binding
NAC, to enforce device configuration requirements
PAM, to enforce local password policies
SD-WAN, to enforce web content filtering through external proxies
DLP, to enforce data protection capabilities
Question 93
An organization has several systems deployed in a public cloud and wants to confirm that when data retention periods are reached, the data is properly disposed of. Which of the following best meets the organization's needs?
Double encrypting the data using both asymmetric and symmetric keys managed by the cloud service provider
Utilizing a data-wiping software to overwrite the existing data
Encrypting the data with customer-managed keys and then deleting both the encryption key and the volume
Asking the cloud provider for copies of certificates of destruction
Question 94
A security engineer reviews an after-action report from a previous security breach and notes a long lag time between detection and containment of a compromised account. The engineer suggests using SOAR to address this concern. Which of the following best explains the engineer's goal?
To prevent accounts from being compromised
To enable log correlation using machine learning
To orchestrate additional reporting for the security operations center
To prepare runbooks to automate future incident response
Question 95
During an audit at an organization, auditors find that developers are able to promote code to production. The auditors request a full review of all production changes. Which of the following should the organization implement to prevent a full review in the future?