Security Boundaries CAS-005 Practice Questions (Page 1)

Questions 1–5

1. 1application · medium

   A software development company is decommissioning a legacy server that has reached end-of-life. The server contains sensitive customer data. The security team must ensure that the data is securely erased and that the server is properly retired from the asset inventory. Which process should the team follow?

   • APerform a secure data wipe on the storage drives, then update the asset inventory to mark the server as retired.
   • BReformat the hard drives using a standard format command and then sell the server to a third party.
   • CPhysically destroy the server but do not update the asset inventory.
   • DRemove the server from the asset inventory and then dispose of it in the trash.
   Reveal Solution Discussion Select an answer first
2. 2expert · hard

   A financial institution is implementing a data perimeter to protect customer financial data. The institution has a mix of on-premises and cloud-based systems. The security team must ensure that data is not exfiltrated from the cloud environment to unauthorized external locations. Which control should the team implement?

   • AEncrypt all data stored in the cloud environment.
   • BImplement strong authentication for all cloud users.
   • CUse a firewall to block all outbound traffic from the cloud environment.
   • DDeploy a cloud access security broker (CASB) that monitors and controls data flow between the cloud environment and external locations.
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   A law firm is implementing a data loss prevention (DLP) solution to protect client confidential information. The firm wants to ensure that sensitive documents are not emailed outside the organization. Which data perimeter control should the firm implement?

   • ARequire employees to use a secure email portal for all external communications.
   • BDisable the ability to attach files to emails in the email client.
   • CConfigure the DLP solution to block outbound emails that contain sensitive data patterns, such as client identifiers or legal case numbers.
   • DEncrypt all emails sent from the firm, regardless of content.
   Reveal Solution Discussion Select an answer first
5. 4application · medium

   A financial services firm is implementing a policy that requires all laptops to be re-imaged with a standard build and to have the latest security patches applied before they are allowed to connect to the corporate network. The security team needs a way to verify that each laptop meets these requirements at the time of connection. Which approach should the team implement?

   • ARequire users to sign a form stating that their laptop is compliant before connecting.
   • BConfigure the DHCP server to only assign IP addresses to laptops with a specific MAC address prefix.
   • CDeploy a group policy that automatically installs the latest patches when the laptop joins the domain.
   • DUse a network access control (NAC) solution that checks the laptop's posture (patch level, antivirus status, and configuration) before granting access.
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   A university is conducting a security risk assessment. The IT team needs to identify which assets are most critical to the university's operations and should be placed in the highest security zone. Which approach should the team use to prioritize assets?

   • APlace all assets in the same security zone to simplify management.
   • BClassify assets based on their value to the organization, such as the impact of loss or compromise on academic and administrative functions.
   • CPrioritize assets based on the cost of the hardware only.
   • DAssign each asset a random priority number and place the top 10% in the highest security zone.
   Reveal Solution Discussion Select an answer first