CompTIA CAS-001 : CompTIA Advanced Security Practitioner

Successful people are never satisfying their current achievements. So they never stop challenging themselves. If you refuse to be an ordinary person, come to learn our CAS-001 preparation questions. Our study materials will broaden your horizons and knowledge. Many people have benefited from learning our study materials. Most of them have realized their dreams and became successful. If you are still afraid of trying our CAS-001 exam quiz, you will never have a chance to grow. Opportunities are always for those who prepare themselves well. The only way to harvest wealth is challenging all the time. Our CAS-001 practice materials are waiting for you. Cheer up for yourself.

Automatic generation of the report

Once you submit your practice, the system of our CAS-001 exam quiz will automatically generate a report. The system is highly flexible, which has short reaction time. So you will quickly get a feedback about your exercises of the CAS-001 preparation questions. Before you choose to end your practices of the study materials, the screen will display the questions you have done, which help you check again to ensure all questions of study materials are well finished. The report includes your scores of the CAS-001 practice materials. Also, it will display how many questions of the study materials you do correctly and mistakenly. In a word, you can compensate for your weakness and change a correct review plan of the study materials. Our online CAS-001 exam quiz is intelligent and powerful. It deserves your choice.

Three versions for your convenience

In order to meet a wide range of tastes, our company has developed the three versions of the CAS-001 preparation questions, which includes PDF version, online test engine and windows software. According to your own budget and choice, you can choose the most suitable one for you. All popular official tests have been included in our study materials. So you can have wide choices. In fact, all of the three versions of the CAS-001 practice materials are outstanding. You will enjoy different learning interests under the guidance of the three versions of study materials. Also, there will have no extra restrictions to your learning because different versions have different merits. All in all, you will not be forced to buy all versions. You have the final right to select. Please consider our CAS-001 exam quiz carefully.

Real exam environment

Our windows software of the study materials are designed to simulate the real test environment. If you want to experience the real test environment, you must install our CAS-001 preparation questions on windows software. Also, it only support running on Java environment. If you do not install the system, the system will automatically download to ensure the normal operation. Most people are nervous and anxious to take part in the CAS-001 exam for the first time. Then it is easy for them to make mistakes. So it is important to get familiar with the real test environment. Also, the real test environment of the study materials can help you control time. After all, you must submit your practice in limited time in CAS-001 practice materials.

CompTIA CAS-001 Exam Syllabus Topics:

CompTIA Advanced Security Practitioner Sample Questions:

1. A new startup company with very limited funds wants to protect the organization from external threats by implementing some type of best practice security controls across a number of hosts located in the application zone, the production zone, and the core network. The 50 hosts in the core network are a mixture of Windows and Linux based systems, used by development staff todevelop new applications. The single Windows host in the application zone is used exclusively by the production team to control software deployments into the production zone. There are 10 UNIX web application hosts in the production zone which are publically accessible.
Development staff is required to install and remove various types of software from their hosts on a regular basis while the hosts in the zone rarely require any type of configuration changes.
Which of the following when implemented would provide the BEST level of protection with the LEAST amount of disruption to staff?

A) NIPS in the production zone, NIDS in the application zone, HIPS in the core network, and anti-virus / anti-malware across all hosts.
B) HIPS in the production zone, NIPS in the application zone, and HIPS in the core network.
C) NIDS in the production zone, HIDS in the application zone, and anti-virus / anti-malware across all hosts.
D) NIPS in the production zone, HIPS in the application zone, and anti-virus / anti-malware across all Windows hosts.

2. There have been some failures of the company's customer-facing website. A security engineer has analyzed the root cause to be the WAF. System logs show that the WAF has been down for 14 total hours over the past month in four separate situations. One of these situations was a two hour scheduled maintenance activity aimed to improve the stability of the WAF. Which of the following is the MTTR, based on the last month's performance figures?

A) 3 hours
B) 3.5 hours
C) 4 hours
D) 4.666 hours

3. An administrator notices the following file in the Linux server's /tmp directory.
-rwsr-xr-x. 4 root root 234223 Jun 6 22:52 bash*
Which of the following should be done to prevent further attacks of this nature?

A) Stop the rpcidmapd service from running
B) Mount all tmp directories nosuid, noexec
C) Never mount the /tmp directory over NFS
D) Restrict access to the /tmp directory

4. A security administrator needs a secure computing solution to use for all of the company's security audit log storage, and to act as a central server to execute security functions from. Which of the following is the BEST option for the server in this scenario?

A) Windows 7 with a secure domain policy and smartcard based authentication
B) A hardened bastion host with a permit all policy implemented in a software firewall
C) A hardened Red Hat Enterprise Linux implementation running a software firewall
D) Solaris 10 with trusted extensions or SE Linux with a trusted policy

5. Company ABC has a 100Mbps fiber connection from headquarters to a remote office 200km (123 miles) away. This connection is provided by the local cable television company. ABC would like to extend a secure VLAN to the remote office, but the cable company says this is impossible since they already use VLANs on their internal network. Which of the following protocols should the cable company be using to allow their customers to establish VLANs to other sites?

A) IS-IS
B) EIGRP
C) 802.1q
D) MPLS

Solutions: