Study with CAS-005 most valid questions & verified answers

A company plans to deploy a new online application that provides video training for its customers.
As part of the design, the application must be:
- Fast for all users
- Available for users worldwide
- Protected against attacks
Which of the following are the best components the company should use to meet these requirements? (Choose two.)

• A. VPN
• B. CASB
• C. WAF
• D. SASE
• E. CDN
• F. IPS

An organization is required to:
- Respond to internal and external inquiries in a timely manner
- Provide transparency.
- Comply with regulatory requirements
The organization has not experienced any reportable breaches but wants to be prepared if a breach occurs in the future. Which of the following is the best way for the organization to prepare?

• A. Integrating automated response mechanisms into the data subject access request process
• B. Outsourcing the handling of necessary regulatory filing to an external consultant
• C. Developing communication templates that have been vetted by internal and external counsel
• D. Conducting lessons-learned activities and integrating observations into the crisis management plan

A company must build and deploy security standards for all servers in its on-premises and cloud environments based on hardening guidelines. Which of the following solutions most likely meets the requirements?

• A. Create baseline images for each OS in use, following security standards, and integrate the images into the patching and deployment solution.
• B. Run a script during server deployment to remove all the unnecessary applications as part of provisioning.
• C. Develop a security baseline to integrate with the vulnerability scanning platform to alert about any server not aligned with the new security standards.
• D. Build all new images from scratch, installing only needed applications and modules in accordance with the new security standards.

The information security manager at a 24-hour manufacturing facility is reviewing a contract for potential risks to the organization. The contract pertains to the support of printers and multifunction devices during non-standard business hours. Which of the following will the security manager most likely identify as a risk?

• A. The lack of an MSA to govern other services provided by the service provider
• B. Print configurations settings for locked print jobs
• C. The lack of chain of custody for devices prior to deployment at the company
• D. The lack of an NDA with the company that supports its devices

Previously intercepted communications must remain secure even if a current encryption key is compromised in the future. Which of the following best supports this requirement?

• A. Key stretching
• B. Simultaneous authentication of equals
• C. Forward secrecy
• D. Tokenization