CAS-005 Practice Test

CAS-005 Practice Test practice questions, page 5 of 20, with answer review and explanations.

Question 21

An internal user can send encrypted emails successfully to all recipients, except one. at an external organization. When the internal user attempts to send encrypted emails to this external recipient, a security error message appears. The issue does not affect unencrypted emails. The external recipient can send encrypted emails to internal users. Which of the following is the most likely cause of the issue?

  1. The validity dates of the external recipient’s private key do not match the SSH keys with which the internal user is accessing the system.
  2. The external recipient has an expired public/private key pair that has not been revoked by the CA.
  3. The internal user's company email servers have an incorrect implementation of OCSP and CRL settings.
  4. The external recipient's email address and the email address associated with the external recipient's public key are mismatched.

Question 22

A security administrator is setting up a virtualization solution that needs to run services from a single host. Each service should be the only one running in its environment. Each environment needs to have its own operating system as a base but share the kernel version and properties of the running host. Which of the following technologies would best meet these requirements?

  1. Containers
  2. Type 1 hypervisor
  3. Type 2 hypervisor
  4. Virtual desktop infrastructure
  5. Emulation

Question 23

A company has data it would like to aggregate from its PLCs for data visualization and predictive maintenance purposes. Which of the following is the most likely destination for the tag data from the PLCs?

  1. External drive
  2. Cloud storage
  3. System aggregator
  4. Local historian

Question 24

Which of the following is the best way to protect the website browsing history for an executive who travels to foreign countries where internet usage is closely monitored?

  1. DOH
  2. EAP-TLS
  3. Geofencing
  4. Private browsing mode

Question 25

A systems administrator is working with the SOC to identify potential intrusions associated with ransomware. The SOC wants the systems administrator to perform network-level analysis to identify outbound traffic from any infected machines. Which of the following is the most appropriate action for the systems administrator to take?

  1. Monitor for IoCs associated with C&C communications.
  2. Tune alerts to Identify changes to administrative groups.
  3. Review NetFlow logs for unexpected increases in egress traffic.
  4. Perform binary hash comparisons to identify infected devices.