CompTIA CAS-002 real exam prep : CompTIA Advanced Security Practitioner (CASP)

The IT manager is evaluating IPS products to determine which would be most effective at stopping network traffic that contains anomalous content on networks that carry very specific types of traffic. Based on the IT manager's requirements, which of the following types of IPS products would be BEST suited for use in this situation?

• A. Anomaly-based
• B. Signature-based
• C. Host-based
• D. Rate-based

A company decides to purchase commercially available software packages. This can introduce new security risks to the network. Which of the following is the BEST description of why this is true?

• A. Commercially available software packages are often widely available. Information concerning vulnerabilities is often kept internal to the company that developed the software.
• B. Commercially available software packages are well known and widely available.
  Information concerning vulnerabilities and viable attack patterns are always shared within the IT community.
• C. Commercially available software packages are typically well known and widely available.
  Information concerning vulnerabilities and viable attack patterns are never revealed by the developer to avoid lawsuits.
• D. Commercially available software packages are not widespread and are only available in limited areas. Information concerning vulnerabilities is often ignored by business managers.

A security consultant is called into a small advertising business to recommend which security policies and procedures would be most helpful to the business. The business is comprised of 20 employees, operating off of two shared servers. One server houses employee data and the other houses client data. All machines are on the same local network. Often these employees must work remotely from client sites, but do not access either of the servers remotely. Assuming no security policies or procedures are in place right now, which of the following would be the MOST applicable for implementation?
(Select TWO).

• A. VPN Policy
• B. Data Classification Policy
• C. Password Policy
• D. Wireless Access Procedure
• E. Database Administrative Procedure

A company with 2000 workstations is considering purchasing a HIPS to minimize the impact of a system compromise from malware. Currently, the company projects a total cost of $50,000 for the next three years responding to and eradicating workstation malware. The Information Security Officer (ISO) has received three quotes from different companies that provide HIPS.
* The first quote requires a $10,000 one-time fee, annual cost of $6 per workstation, and a 10% annual support fee based on the number of workstations.
* The second quote requires a $15,000 one-time fee, an annual cost of $5 per workstation, and a 12% annual fee based on the number of workstations.
* The third quote has no one-time fee, an annual cost of $8 per workstation, and a
15% annual fee based on the number of workstations.
Which solution should the company select if the contract is only valid for three years?

• A. Second quote
• B. First quote
• C. Accept the risk
• D. Third quote

A team of security engineers has applied regulatory and corporate guidance to the design of a corporate network. The engineers have generated an SRTM based on their work and a thorough analysis of the complete set of functional and performance requirements in the network specification. Which of the following BEST describes the purpose of an SRTM in this scenario?

• A. To facilitate the creation of performance testing metrics and test plans
• B. To ensure the security of the network is documented prior to customer delivery
• C. To allow certifiers to verify the network meets applicable security requirements
• D. To document the source of all functional requirements applicable to the network