CompTIA CAS-002 Advanced Security Certified Practice Exam

Sample Questions

Q) An administrator wants to allow flexible mandatory access control data based on an open source operating system to prevent abnormal application changes or executions. Which of the following would best achieve this?

a) Access Control Lists

b) SELinux

c) IPtables firewall

d) SIDES

Q) SAN Company ABC is approaching capacity, and will ensure that downtime costs if the server run out of disk space. Which of the following is a more affordable alternative to purchasing a new SAN?

a) You need to increase the availability multipath

b) Enable deduplication storage pools

c) Implement snapshots to reduce the size of the virtual disk

d) Implement replication offsite datacenter

Q) A system administrator establishes a CIFS share on a UNIX device to share the data for Windows systems. The security authentication on the Windows domain is set to the highest level. Windows users are claiming that they can not authenticate to the UNIX sharing. Which of the following settings on UNIX servers would solve the problem?

a) Refuse LM and accept only NTLMv2

b) Accept only LM

c) Refusing to accept NTLMv2, and LM

d) Accept only NTLM

Q) Accept only NTLM

a) vTPM

b) HSM

c) TPM

d) INE

Q) A user has configured a laptop computer with multiple operating system installations. The operating systems are all installed in a single SSD, but each has its own partition and logical volume. Which of the following is the best way to ensure the confidentiality of individual data of the operating system?

a) Encryption of each single partition

b) Encryption in the SSD file level

c) FDE of each logical volume on the SSD

d) FDE entire SSD as a single disk