CompTIA CAS-003 Value Pack (Frequently Bought Together)

A core router was manipulated by a credentialed bypass to send all network traffic through a secondary router under the control of an unauthorized user connected to the network by WiFi.
Which of the following would BEST reduce the risk of this attack type occurring?

• A. Implement a strong, complex password policy for user accounts that have access to the core router.
• B. Allow access to the core router management interface only through an out-of-band channel.
• C. Deploy 802.1X as the NAC system for the WiFi infrastructure.
• D. Add additional port security settings for the switching environment connected to the core router.

A financial consulting firm recently recovered from some damaging incidents that were associated with malware installed via rootkit. Post-incident analysis is ongoing, and the incident responders and systems administrators are working to determine a strategy to reduce the risk of recurrence. The firm's systems are running modern operating systems and feature UEFI and TPMs. Which of the following technical options would provide the MOST preventive value?

• A. Strengthen the password complexity requirements
• B. Update and deploy GPOs
• C. Configure and use measured boot
• D. Update the antivirus software and definitions

A new employee is plugged into the network on a BYOD machine but cannot access the network Which of the following must be configured so the employee can connect to the network?

• A. Firewall
• B. Port security
• C. Remote access
• D. VPN

A company is repeatedly being breached by hackers who valid credentials. The company's Chief information Security Officer (CISO) has installed multiple controls for authenticating users, including biometric and token-based factors. Each successive control has increased overhead and complexity but has failed to stop further breaches. An external consultant is evaluating the process currently in place to support the authentication controls. Which of the following recommendation would MOST likely reduce the risk of unauthorized access?

• A. Implement strict three-factor authentication.
• B. Implement least privilege policies
• C. Strengthen identify-proofing procedures
• D. Switch to one-time or all user authorizations.

A user workstation was infected with a new malware variant as a result of a drive-by download. The security administrator reviews key controls on the infected workstation and discovers the following:

Which of the following would BEST prevent the problem from reoccurring in the future? (Choose two.)

• A. Enable application blacklisting
• B. Improve patch management processes
• C. Install EDR
• D. Install HIDS
• E. Enable DLP
• F. Install HIPS