CompTIA CAS-001 real exam prep : CompTIA Advanced Security Practitioner

The increasing complexity of attacks on corporate networks is a direct result of more and more corporate employees connecting to corporate networks with mobile and personal devices. In most cases simply banning these connections and devices is not practical because they support necessary business needs. Which of the following are typical risks and mitigations associated with this new trend?

• A. Risks: Data exfiltration, loss of data via stolen mobile devices, increased data leakage at the network edge Mitigations: Remote data wipe capabilities, implementing corporate security on personally owned devices
• B. Risks: Data leakage, lost data on destroyed mobile devices, smaller network attack surface, prohibitive telecommunications costs Mitigations: Device Encryptions, lock screens, certificate based authentication, corporate telecom plans
• C. Risks: Theft of mobile devices, unsanctioned applications, minimal device storage, call quality Mitigations: GPS tracking, centralized approved application deployment, over-the-air backups, QoS implementation
• D. Risks: Confidentiality leaks through cell conversations, availability of remote corporate
  data, integrity of data stored on the devices
  Mitigations: Cellular privacy extensions, mobile VPN clients, over-the-air backups.

A security engineer at a major financial institution is prototyping multiple secure network configurations. The testing is focused on understanding the impact each potential design will have on the three major security tenants of the network. All designs must take into account the stringent compliance and reporting requirements for most worldwide financial institutions.Which of the following is the BEST list of security lifecycle related concerns related to deploying the final design?

• A. Decommissioning the existing network smoothly, implementing maintenance and operations procedures for the new network in advance, and ensuring compliance with applicable regulations and laws.
• B. Ensuring smooth transition of maintenance resources to support the new network, updating all whole disk encryption keys to be compatible with IPv6, and maximizing profits for bank shareholders.
• C. Interoperability with the Security Administration Remote Access protocol, integrity of the data at rest, overall network availability, and compliance with corporate and government regulations and policies.
• D. Resistance of the new network design to DDoS attacks, ability to ensure confidentiality of all data in transit, security of change management processes and procedures, and resilience of the firewalls to power fluctuations.
• E. Decommissioning plan for the new network, proper disposal protocols for the existing network equipment, transitioning operations to the new network on day one, and ensuring compliance with corporate data retention policies.

Which of the following potential vulnerabilities exists in the following code snippet?
var myEmail = document.getElementById("formInputEmail").value;
if (xmlhttp.readyState==4 && xmlhttp.status==200)
{
Document.getElementById("profileBox").innerHTML = "Emails will be sent to " + myEmail +
xmlhttp.responseText;
}

• A. Javascript buffer overflow
• B. JSON weaknesses
• C. AJAX XHR weaknesses
• D. DOM-based XSS

-----
An administrator is unable to connect to a server via VNC.
Upon investigating the host firewall configuration, the administrator sees the following lines:
A INPUT -m state --state NEW -m tcp -p tcp --dport 3389 -j DENY A INPUT -m state --state NEW -m tcp -p tcp --dport 22 -j DENY A INPUT -m state --state NEW -m tcp -p tcp --dport 10000 -j ACCEPT A INPUT -m state --state NEW -m tcp -p tcp --dport 80 -j DENY A INPUT -m state --state NEW -m tcp -p tcp --sport 3389 -j ACCEPT
Which of the following should occur to allow VNC access to the server?

• A. Fix the typo in one line.
• B. A line needs to be added.
• C. A line needs to be removed.
• D. DENY needs to be changed to ACCEPT on one line.

Which of the following does SAML uses to prevent government auditors or law enforcement from identifying specific entities as having already connected to a service provider through an SSO operation?

• A. Transient identifiers
• B. Directory services
• C. Restful interfaces
• D. Security bindings