| Exam Name: | CompTIA SecurityX Certification Exam | ||
| Exam Code: | CAS-004 Dumps | ||
| Vendor: | CompTIA | Certification: | CompTIA CASP |
| Questions: | 619 Q&A's | Shared By: | kaleb |
A security engineer is assessing a legacy server and needs to determine if FTP is running and on which port The service cannot be turned off, as it would impact a critical application's ability to function. Which of the following commands would provide the information necessary to create a firewall rule to prevent that service from being exploited?
An IDS was unable to detect malicious network traffic during a recent security incident, even though all traffic was being sent using HTTPS. As a result, a website used by employees was compromised. Which of the following detection mechanisms would allow the IDS to detect an attack like this one in the future?
A company with only U S -based customers wants to allow developers from another country to work on the company's website However, the company plans to block normal internet traffic from the other country Which of the following strategies should the company use to accomplish this objective? (Select two).
A development team needs terminal access to preproduction servers to verify settings and enter purchased license keys. To address the team’s needs, the security administrator implements the following requirements:
•Only trusted accounts can access the preproduction servers.
•Developers cannot access the preproduction servers directly from their workstations.
•The trusted accounts should only have access to specific preproduction servers.
Which of the following are necessary to fulfill the security requirements? (Select two).
TESTED 31 Jul 2025
