Pass Using CAS-004 Exam Dumps

Page: 31 / 32

Question 124

A security is assisting the marketing department with ensuring the security of the organization’s social media platforms. The two main concerns are:

The Chief marketing officer (CMO) email is being used department wide as the username

The password has been shared within the department

Which of the following controls would be BEST for the analyst to recommend?

Options:

Configure MFA for all users to decrease their reliance on other authentication.

Have periodic, scheduled reviews to determine which OAuth configuration are set for each media platform.

Create multiple social media accounts for all marketing user to separate their actions.

Ensue the password being shared is sufficiently and not written down anywhere.

Question 125

A company that uses AD is migrating services from LDAP to secure LDAP. During the pilot phase, services are not connecting properly to secure LDAP. Block is an except of output from the troubleshooting session:

Which of the following BEST explains why secure LDAP is not working? (Select TWO.)

Options:

The clients may not trust idapt by default.

The secure LDAP service is not started, so no connections can be made.

Danvills.com is under a DDoS-inator attack and cannot respond to OCSP requests.

Secure LDAP should be running on UDP rather than TCP.

The company is using the wrong port. It should be using port 389 for secure LDAP.

Secure LDAP does not support wildcard certificates.

The clients may not trust Chicago by default.

Question 126

A company in the financial sector receives a substantial number of customer transaction requests via email. While doing a root-cause analysis conceding a security breach, the CIRT correlates an unusual spike in port 80 traffic from the IP address of a desktop used by a customer relations employee who has access to several of the compromised accounts. Subsequent antivirus scans of the device do not return an findings, but the CIRT finds undocumented services running on the device. Which of the following controls would reduce the discovery time for similar in the future.

Options:

Implementing application blacklisting

Configuring the mall to quarantine incoming attachment automatically

Deploying host-based firewalls and shipping the logs to the SIEM

Increasing the cadence for antivirus DAT updates to twice daily

Question 127

An application developer is including third-party background security fixes in an application. The fixes seem to resolve a currently identified security issue. However, when the application is released to the public, report come In that a previously vulnerability has returned. Which of the following should the developer integrate into the process to BEST prevent this type of behavior?