CAS-003 Dumps questions
                     
https://www.dumpsplanet.comm/  



https://www.dumpsplanet.com

m/  

 

Page No | 1   
 

 

   CompTIA  
   CAS-003 EXAM 

Advanced Security Practitioner 

 

              Product: Demo 

 
For More Information: 

 
                                                                https://www.dumpsplanet.com/CAS-003-dumps

 

 

 

 


https://www.dumpsplanet.com/ 

 
 

QUESTION 1 
 

A security consultant is attempting to discover if the company is utilizing databases 
on client machines to store the customer data. The consultant reviews the following 
information: 

 

 
Which of the following commands would have provided this output? 

 
A. arp -s 

B. netstat -a 

C. ifconfig -arp 
D. sqlmap -w 

 

Answer: B 
QUESTION 2 
 

A security administrator wants to allow external organizations to cryptographically 
validate the company's domain name in email messages sent by employees. Which 
of the following should the security administrator implement? 

 
A. SPF 

B. S/MIME 

C. TLS 

D. DKIM 

 

Answer: D 
QUESTION 3 
 

A large enterprise with thousands of users is experiencing a relatively high frequency of 
malicious activity from the insider threats. Much of the activity appears to involve internal 
reconnaissance that results in targeted attacks against privileged users and network file 
shares. Given this scenario, which of the following would MOST likely prevent or deter 
these attacks? (Choose two.) 

 
A. Conduct role-based training for privileged users that highlights common threats against them and 

covers best practices to thwart attacks 

B. Increase the frequency at which host operating systems are scanned for vulnerabilities, and 
decrease the amount of time permitted between vulnerability identification and the application of 
corresponding patches 

C. Enforce command shell restrictions via group policies for all workstations by default to limit which 
native operating system tools are available for use 


https://www.dumpsplanet.com/ 

D. Modify the existing rules of behavior to include an explicit statement prohibiting users from 
enumerating user and file directories using available tools and/or accessing visible resources that 
do not directly pertain to their job functions 

E. For all workstations, implement full-disk encryption and configure UEFI instances to require 

 complex passwords for authentication 

F. Implement application blacklisting enforced by the operating systems of all machines in the 
enterprise 

 

Answer: CD 
QUESTION 4 
 

A team is at the beginning stages of designing a new enterprise-wide application. The 
new application will have a large database and require a capital investment in 
hardware. The Chief Information Officer (IO) has directed the team to save money and 
reduce the reliance on the datacenter, and the vendor must specialize in hosting large 
databases in the cloud. Which of the following cloud-hosting options would BEST meet 
these needs? 

 
A. Multi-tenancy SaaS 

B. Hybrid IaaS 

C. Single-tenancy PaaS 

D. Community IaaS 

 

Answer: C 
QUESTION 5 
 

Drag and Drop Question 
A security consultant is considering authentication options for a financial institution. The 
following authentication options are available security mechanism to the appropriate use 
case. Options may be used once. 

 


https://www.dumpsplanet.com/ 

 

Answer: 
 

 

QUESTION 6 

 
Legal authorities notify a company that its network has been compromised for the 
second time in two years. The investigation shows the attackers were able to use the 
same vulnerability on different systems in both attacks. Which of the following would 
have allowed the security team to use historical information to protect against the 
second attack? 

 
A. Key risk indicators 

B. Lessons learned 

C. Recovery point objectives 
D. Tabletop exercise 

 

Answer: A 
QUESTION 7 
 

A security engineer has implemented an internal user access review tool so service 
teams can baseline user accounts and group memberships. The tool is functional and 
popular among its initial set of on-boarded teams. However, the tool has not been 
built to cater to a broader set of internal teams yet. The engineer has sought feedback 
from internal stakeholders, and a list of summarized requirements is as follows: 

 
The tool needs to be responsive so service teams can query 

it, and then perform an automated response action. 


Page No | 6 

 

https://www.dumpsplanet.com/ 

The tool needs to be resilient to outages so service teams can 

perform the user access review at any point in time and meet 

their own SLAs. 

The tool will become the system-of-record for approval, re-

approval, and removal life cycles of group memberships and 

must allow for data retrieval after failure. 
 

Which of the following need specific attention to meet the requirements listed 
above? (Choose three.) 

 
A. Scalability 

B. Latency 

C. Availability 

D. Usability 

E. Recoverability 
F. Maintainability 

 
Answer: BCE 

 

  QUESTION 8 
 

After investigating virus outbreaks that have cost the company $1,000 per incident, 
the company's Chief Information Security Officer (CISO) has been researching new 
antivirus software solutions to use and be fully supported for the next two years. The 
CISO has narrowed down the potential solutions to four candidates that meet all the 
company's performance and capability requirements: 

 

 
Using the table above, which of the following would be the BEST business-driven 
choice among five possible solutions? 

 
A. Product A 

B. Product B 

C. Product C 

D. Product D 

E. Product E 

 

Answer: E 
 

 
 
 

 
 
 
 
 
 
 


Page No | 7 

 

https://www.dumpsplanet.com/ 

   THANKS FOR TRYING THE DEMO OF OUR PRODUCT 

 
   Visit Our Site to Purchase the Full Set of Actual CAS-003 Exam Questions With Answers. 
 

 

Dumps Planet also provides you extra 20% discount on the purchase of 

CAS-003 exam. Use Coupon code like “dp20%” 
 

 
 

                        https://www.dumpsplanet.com/CAS-003-dumps 

 

               Money Back Guarantee