CompTIA Advanced Security Practitioner (CASP+) CAS-004 Free Dumps

A security analyst is performing a review of a web application. During testing as a standard user, the following error log appears:

Which of the following BEST describes the analyst’s findings and a potential mitigation technique?

A local university that has a global footprint is undertaking a complete overhaul of its website and associated systems Some of the requirements are:

• Handle an increase in customer demand of resources
• Provide quick and easy access to information
• Provide high-quality streaming media
• Create a user-friendly interface

Which of the following actions should be taken FIRST?

In order to save money, a company has moved its data to the cloud with a low-cost provider. The company did not perform a security review prior to the move; however, the company requires all of its data to be stored within the country where the headquarters is located. A new employee on the security team has been asked to evaluate the current provider against the most important requirements. The current cloud provider that the company is using offers:

• Only multitenant cloud hosting
• Minimal physical security
• Few access controls
• No access to the data center

The following information has been uncovered:

• The company is located in a known floodplain. which flooded last year.
• Government regulations require data to be stored within the country.

Which of the following should be addressed FIRST?

A security administrator needs to implement an X.509 solution for multiple sites within the human resources department. This solution would need to secure all subdomains associated with the domain name of the main human resources web server. Which of the following would need to be implemented to properly secure the sites and provide easier private key management?

An organization’s threat team is creating a model based on a number of incidents in which systems in an air-gapped location are compromised. Physical access to the location and logical access to the systems are limited to administrators and select, approved, on-site company employees. Which of the following is the BEST strategy to reduce the risks of data exposure?

An organization is establishing a new software assurance program to vet applications before they are introduced into the production environment. Unfortunately, many of the applications are provided only as compiled binaries. Which of the following should the organization use to analyze these applications? (Choose two.)

Which of the following agreements includes no penalties and can be signed by two entities that are working together toward the same goal?

Which of the following BEST describes a common use case for homomorphic encryption?

A security analyst runs a vulnerability scan on a network administrator’s workstation. The network administrator has direct administrative access to the company’s SSO web portal. The vulnerability scan uncovers critical vulnerabilities with equally high CVSS scores for the user’s browser, OS, email client, and an offline password manager. Which of the following should the security analyst patch FIRST?

An organization is moving its intellectual property data from on premises to a CSP and wants to secure the data from theft. Which of the following can be used to mitigate this risk?