CompTIA CAS-001 Exam Syllabus Topics:

CompTIA Advanced Security Practitioner Sample Questions:

Question #1
Company XYZ is building a new customer facing website which must access some corporate resources. The company already has an internal facing web server and a separate server supporting an extranet to which suppliers have access. The extranet web server is located in a network DMZ. The internal website is hosted on a laptop on the internal corporate network. The internal network does not restrict traffic between any internal hosts. Which of the following locations will BEST secure both the intranet and the customer facing website?

A. The existing extranet network segment
B. The existing internal network segment
C. A third-party web hosting company
D. Dedicated DMZ network segments

Question #2
Customer Need:
"We need the system to produce a series of numbers with no discernible mathematical progression for use by our Java based, PKI-enabled, customer facing website."
Which of the following BEST restates the customer need?

A. The system shall generate a truly random number based upon user PKI certificates.
B. The system shall implement a pseudo-random number generator for use by corporate customers.
C. The system shall use a pseudo-random number generator seeded the same every time.
D. The system shall generate a pseudo-random number upon invocation by the existing Java program.

Question #3
-----
An administrator is unable to connect to a server via VNC.
Upon investigating the host firewall configuration, the administrator sees the following lines:
A INPUT -m state --state NEW -m tcp -p tcp --dport 3389 -j DENY A INPUT -m state --state NEW -m tcp -p tcp --dport 22 -j DENY A INPUT -m state --state NEW -m tcp -p tcp --dport 10000 -j ACCEPT A INPUT -m state --state NEW -m tcp -p tcp --dport 80 -j DENY A INPUT -m state --state NEW -m tcp -p tcp --sport 3389 -j ACCEPT
Which of the following should occur to allow VNC access to the server?

A. Fix the typo in one line.
B. A line needs to be removed.
C. DENY needs to be changed to ACCEPT on one line.
D. A line needs to be added.

Question #4
An administrator attempts to install the package "named.9.3.6-12-x86_64.rpm" on a server. Even though the package was downloaded from the official repository, the server states the package cannot be installed because no GPG key is found. Which of the following should the administrator perform to allow the program to be installed?

A. Import the repository's public key.
B. Run sha1sum and verify the hash.
C. Download the file from the program publisher's website.
D. Generate RSA and DSA keys using GPG.

Question #5
A forensic analyst receives a hard drive containing malware quarantined by the antivirus application. After creating an image and determining the directory location of the malware file, which of the following helps to determine when the system became infected?

A. The malware file's modify, access, change time properties.
B. The date/time stamp of the malware detection in the antivirus logs.
C. The timeline analysis of the file system.
D. The time stamp of the malware in the swap file.

Solutions: