CompTIA Updated CAS-004 Exam Questions and Answers by bodie

A company security engineer arrives at work to face the following scenario:

1) Website defacement

2) Calls from the company president indicating the website needs to be fixed Immediately because It Is damaging the brand

3) A Job offer from the company's competitor

4) A security analyst's investigative report, based on logs from the past six months, describing how lateral movement across the network from various IP addresses originating from a foreign adversary country resulted in exfiltrated data

Which of the following threat actors Is MOST likely involved?

A company's finance department acquired a new payment system that exports data to an unencrypted file on the system. The company implemented controls on the file so only appropriate personnel are allowed access. Which of the following risk techniques did the department use in this situation?

А. Accept

В. Avoid

C. Transfer

D. Mitigate

A vulnerability assessment endpoint generated a report of the latest findings. A security analyst needs to review the report and create a priority list of items that must be addressed. Which of the following should the analyst use to create the list quickly?

A company is looking for a solution to hide data stored in databases. The solution must meet the following requirements:

• Be efficient at protecting the production environment
• Not require any change to the application
• Act at the presentation layer

Which of the following techniques should be used?