CompTIA CAS-005 試験概要:
| 認定ベンダー: | CompTIA |
|---|---|
| 試験名: | CompTIA SecurityX 認定試験 |
| 試験番号: | CAS-005 |
| 出題数: | 最大90問 |
| 対応言語: | English |
| 試験時間: | 165 分 |
| 認定の有効期間: | 3年 |
| 受験料: | $512 USD |
| 関連資格: | CompTIA SecurityX（旧 CASP+） |
| 試験形式: | パフォーマンスベース, 選択式 |
| 合格点: | 合格/不合格（スケールドスコアなし） |
| サンプル問題: | CompTIA CAS-005 サンプル問題 |
| 受験方法: | オンライン（Pearson VUE経由）または対面（Pearson VUE試験センター） |
| 前提条件: | 一般的な実務IT経験が最低10年必要であり、そのうち5年は幅広い実務ITセキュリティ経験であること。Network+、Security+、CySA+、Cloud+、およびPenTest+、または同等の知識が推奨されます。 |
| 公式シラバスのURL: | https://www.comptia.org/certifications/securityx |
CompTIA CAS-005 認定試験の出題範囲：
| トピック | 出題範囲 |
|---|---|
| トピック 1 |
|
| トピック 2 |
|
| トピック 3 |
|
| トピック 4 |
|
CompTIA SecurityX Certification 認定 CAS-005 試験問題：
問題 #1
A company migrating to a remote work model requires that company-owned devices connect to a VPN before logging in to the device itself. The VPN gateway requires that a specific key extension is deployed to the machine certificates in the internal PKI. Which of the following best explains this requirement?
A. The server connection uses SSL VPN, which uses certificates for secure communication.
B. The VPN client selected the certificate with the correct key usage without user interaction.
C. The certificate is an additional factor to meet regulatory MFA requirements for VPN access.
D. The internal PKI certificate deployment allows for Wi-Fi connectivity before logging in to other systems.
問題 #2
A software vendor provides routine functionality and security updates to its global customer base.
The vendor would like to ensure distributed updates are authorized, originate from only the company, and have not been modified by others. Which of the following solutions best supports these objectives?
A. Envelope encryption
B. File integrity monitoring
C. Code signing
D. Application control
問題 #3
A company recently migrated its critical web application to a cloud provider's environment. As part of the company's risk management program, the company intends to conduct an external penetration test. According to the scope of work and the rules of engagement, the penetration tester will validate the web application's security and check for opportunities to expose sensitive company information in the newly migrated cloud environment. Which of the following should be the first consideration prior to engaging in the test?
A. Ensure the latest patches and signatures are deployed on the web server.
B. Create an NDA between the external penetration tester and the company.
C. Prepare a redundant server to ensure the critical web application's availability during the test.
D. Obtain agreement between the company and the cloud provider to conduct penetration testing.
問題 #4
A security engineer is assessing a new tool to segment data and communications between domains. The assessment must determine how data transmission controls can be bypassed without detection. Which of the following techniques should the security engineer use?
A. Covert channel analysis
B. Fuzz testing
C. Machine-learning statistical analysis
D. Protocol analysis
問題 #5
A security analyst was monitoring the networks of a group of companies. The analyst identified several periods of concentrated, coordinated activity by unknown actors. The activity repeated at regular intervals and affected all the companies. Minor hardware outages that correlated with the same times as the discovered activity escalated in severity. Which of the following threat actors was most likely involved?
A. An advanced persistent threat financed by a nation-state
B. Disgruntled employees who were recently terminated
C. An organized crime collective running a ransomware campaign
D. A group of politically motivated hackers
解説：
| 問題 #1 正解： B | 問題 #2 正解： C | 問題 #3 正解： D | 問題 #4 正解： A | 問題 #5 正解： A |
1528 お客様のコメント
品質保証JPexamはIT認定試験のシラバスに従って、試験問題の範囲を正確に絞って、的中率が99％の最新問題集を捧げます。
1年間の無料更新サービスJPexamは1年以内に問題集の無料更新サービスを提供し、お客様がいつでも最新版の問題集を持つことを保証いたします。もし試験の内容が変更されたら、弊社は直ちにお客様にお知らせします。それに、弊社の問題集が更新されたら、早速メールで最新バージョンを送付いたします。
全額返金JPexamの問題集を利用すると、短時間で勉強しても試験に合格できるのを保証いたします。試験に不合格になってしまった場合、弊社は全額返金いたします。(
ご購入前のお試しJPexamは問題集のサンプルを無料で提供いたします。ご購入前にサンプルを試用して製品の品質を確認することができます。ご遠慮なく利用してください。
