CAS-005 Practice Test practice questions, page 9 of 20, with answer review and explanations.
Question 41
A web application server is running a legacy operating system with an unpatched RCE vulnerability. The server cannot be upgraded until the corresponding application code is changed. Which of the following compensating controls would best prevent successful exploitation?
Segmentation
CASB
HIPS
UEBA
Question 42
Which of the following is the reason why security engineers often cannot upgrade the security of embedded facility automation systems?
They are constrained by available compute.
They lack x86-64 processors.
They lack EEPROM.
They are not logic-bearing devices.
Question 43
A security analyst identified a vulnerable and deprecated runtime engine that Is supporting a public-facing banking application. The developers anticipate the transition to modern development environments will take at least a month. Which of the following controls would best mitigate the risk without interrupting the service during the transition?
Shutting down the systems until the code is ready
Uninstalling the impacted runtime engine
Selectively blocking traffic on the affected port
Configuring IPS and WAF with signatures
Question 44
A security architect wants to ensure a remote host's identity and decides that pinning the X.509 certificate to the device is the most effective solution. Which of the following must happen first?
Use Distinguished Encoding Rules (DER) for the certificate.
Extract the private key from the certificate.
Use an out-of-band method to obtain the certificate.
Compare the retrieved certificate with the embedded certificate.
Question 45
A company hired a third-party consultant to run a cybersecurity incident simulation in order to identify security gaps and prepare stakeholders for a potential incident. Which of the following best describes this activity?