CAS-003 Exam Dumps | An analyst is investigating behavior on a corporate-owned, corporate-managed mobile device with application

<< Prev Question Next Question >>

Question 74/180

An analyst is investigating behavior on a corporate-owned, corporate-managed mobile device with application whitelisting enabled, based on a name string. The employee to whom the device is assigned reports the approved email client is displaying warning messages that can launch browser windows and is adding unrecognized email addresses to the "compose" window.
Which of the following would provide the analyst the BEST chance of understanding and characterizing the malicious behavior?

A. Reverse engineer the application binary.

B. Change to a whitelist that uses cryptographic hashing.

C. Analyze the device firmware via the JTAG interface.

D. Penetration test the mobile application.

E. Perform static code analysis on the source code.

Question List (180q): Question 1: The government is concerned with remote military missions be...; Question 2: A security analyst is reviewing weekly email reports and fin...; Question 3: A remote user reports the inability to authenticate to the V...; Question 4: An organization is implementing a virtualized thin-client so...; Question 5: In the past, the risk committee at Company A has shown an av...; Question 6: An organization designs and develops safety-critical embedde...; Question 7: A security analyst who is concerned about sensitive data exf...; Question 8: A user asks a security practitioner for recommendations on s...; Question 9: The Chief Information Security Officer (CISO) of an organiza...; Question 10: Which of the following is the GREATEST security concern with...; Question 11: A technician uses an old SSL server due to budget constraint...; Question 12: A financial consulting firm recently recovered from some dam...; Question 13: A company wants to implement a cloud-based security solution...; Question 14: Which of the following is MOST likely to be included in a se...; Question 15: An administrator is working with management to develop polic...; Question 16: Which of the following BEST represents a risk associated wit...; Question 17: An organization is creating requirements for new laptops tha...; Question 18: Legal authorities notify a company that its network has been...; Question 19: An administrator wants to install a patch to an application....; Question 20: Developers are working on anew feature to add to a social me...; Question 21: Within change management, winch of the following ensures fun...; Question 22: A PaaS provider deployed a new product using a DevOps method...; Question 23: A company's Chief Information Security Officer (CISO) is wor...; Question 24: A penetration testing manager is contributing to an RFP for ...; Question 25: A security engineer is making certain URLs from an internal ...; Question 26: A malware infection spread to numerous workstations within t...; Question 27: A new database application was added to a company's hosted V...; Question 28: A security engineer is embedded with a development team to e...; Question 29: A company recently implemented a variety of security service...; Question 30: A university's help desk is receiving reports that Internet ...; Question 31: There have been several exploits to critical devices within ...; Question 32: A security engineer reviews the table below: (Exhibit) The e...; Question 33: A penetration tester is conducting an assessment on Comptia....; Question 34: A Chief Information Security Officer (CISO is reviewing and ...; Question 35: A Chief Information Security Officer (CISO) is reviewing the...; Question 36: A company contracts a security engineer to perform a penetra...; Question 37: Management is reviewing the results of a recent risk assessm...; Question 38: During the decommissioning phase of a hardware project, a se...; Question 39: Which of the following attacks can be used to exploit a vuln...; Question 40: A security analyst has received the following requirements f...; Question 41: A new security policy states all wireless and wired authenti...; Question 42: A cybersecurity analyst is conducting packet analysis on the...; Question 43: A security consultant is attempting to discover if the compa...; Question 44: A government entity is developing requirements for an RFP to...; Question 45: At a meeting, the systems administrator states the security ...; Question 46: A company wants to configure its wireless network to require...; Question 47: A systems security engineer is assisting an organization's m...; Question 48: A technician is validating compliance with organizational po...; Question 49: A network engineer is upgrading the network perimeter and in...; Question 50: A bank is initiating the process of acquiring another smalle...; Question 51: A developer emails the following output to a security admini...; Question 52: A company makes consumer health devices and needs to maintai...; Question 53: Due to a recent breach, the Chief Executive Officer (CEO) ha...; Question 54: The Chief Information Security Officer (CISO) of a company t...; Question 55: One of the objectives of a bank is to instill a security awa...; Question 56: An enterprise with global sites processes and exchanges high...; Question 57: A core router was manipulated by a credentialed bypass to se...; Question 58: A Chief Information Security Officer (CISO) is developing a ...; Question 59: A development team is testing an in-house-developed applicat...; Question 60: An organization enables BYOD but wants to allow users to acc...; Question 61: A hospital is using a functional magnetic resonance imaging ...; Question 62: Following a recent and very large corporate merger, the numb...; Question 63: An application has been through a peer review and regression...; Question 64: Given the following output from a local PC: (Exhibit) Which ...; Question 65: A company's existing forward proxies support software-based ...; Question 66: A database administrator is required to adhere to and implem...; Question 67: Given the code snippet below: (Exhibit) Which of the followi...; Question 68: A systems administrator at a medical imaging company discove...; Question 69: An enterprise's Chief Technology Officer (CTO) and Chief Inf...; Question 70: Given the following code snippet: (Exhibit) Which of the fol...; Question 71: A recent assessment identified that several users' mobile de...; Question 72: A security engineer discovers a PC may have been breached an...; Question 73: A company's user community is being adversely affected by va...; Question 74: An analyst is investigating behavior on a corporate-owned, c...; Question 75: Following a security assessment, the Chief Information Secur...; Question 76: A company has decided to replace all the T-1 uplinks at each...; Question 77: A smart switch has the ability to monitor electrical levels ...; Question 78: A hospital's security team recently determined its network w...; Question 79: Within the past six months, a company has experienced a seri...; Question 80: During a sprint, developers are responsible for ensuring the...; Question 81: A newly hired Chief Information Security Officer (CISO) is r...; Question 82: A company's Chief Operating Officer (COO) is concerned about...; Question 83: The finance department has started to use a new payment syst...; Question 84: The Chief Executive Officer (CEO) of a fast-growing company ...; Question 85: Ann, a user' brings her laptop to an analyst after noticing ...; Question 86: A Chief Information Security Officer (CISO) is reviewing the...; Question 87: Given the following output from a security tool in Kali: (Ex...; Question 88: An insurance company has two million customers and is resear...; Question 89: An information security manager is concerned that connectivi...; Question 90: Designing a system in which only information that is essenti...; Question 91: An employee decides to log into an authorized system. The sy...; Question 92: A systems administrator has installed a disk wiping utility ...; Question 93: A developer is reviewing the following transaction logs from...; Question 94: An organization, which handles large volumes of PII, allows ...; Question 95: A security engineer wants to introduce key stretching techni...; Question 96: An SQL database is no longer accessible online due to a rece...; Question 97: A security administrator is investigating an incident involv...; Question 98: While traveling to another state, the Chief Financial (CFO) ...; Question 99: A security engineer is performing an assessment again for a ...; Question 100: A security analyst sees some suspicious entries in a log fil...; Question 101: A technician receives the following security alert from the ...; Question 102: A consulting firm was hired to conduct assessment for a comp...; Question 103: You are a security analyst tasked with interpreting an Nmap ...; Question 104: A Chief Information Security Officer (CISO) requests the fol...; Question 105: Following a recent network intrusion, a company wants to det...; Question 106: A pharmacy gives its clients online access to their records ...; Question 107: A regional business is expecting a severe winter storm next ...; Question 108: Drag and drop the cloud deployment model to the associated u...; Question 109: A security consultant was hired to audit a company's passwor...; Question 110: A security appliance vendor is reviewing an RFP that is requ...; Question 111: The Chief Information Officer (CISO) is concerned that certa...; Question 112: While attending a meeting with the human resources departmen...; Question 113: A software development manager is running a project using ag...; Question 114: To prepare for an upcoming audit, the Chief Information Secu...; Question 115: A consultant is planning an assessment of a customer-develop...; Question 116: The Chief Information Security Officer (CISO) of a new compa...; Question 117: A government contractor was the victim of a malicious attack...; Question 118: During a security assessment, an organization is advised of ...; Question 119: The Chief Financial Officer (CFO) of an organization wants t...; Question 120: A firewall specialist has been newly assigned to participate...; Question 121: A government organization operates and maintains several ICS...; Question 122: An engineer is evaluating the control profile to assign to a...; Question 123: A Chief Information Officer (CIO) publicly announces the imp...; Question 124: A project manager is working with a team that is tasked to d...; Question 125: Which of the following system would be at the GREATEST risk ...; Question 126: After a large organization has completed the acquisition of ...; Question 127: Which of the following is a feature of virtualization that c...; Question 128: A security consultant is performing a penetration test on ww...; Question 129: A Chief Information Securiy Officer (CISO) is reviewing tech...; Question 130: A development team releases updates to an application regula...; Question 131: An organization is attempting to harden its web servers and ...; Question 132: A security engineer is helping the web developers assess a n...; Question 133: A company monitors the performance of all web servers using ...; Question 134: A regional transportation and logistics company recently hir...; Question 135: A security administrator is advocating for enforcement of a ...; Question 136: An organization's Chief Financial Officer (CFO) was the targ...; Question 137: A new cluster of virtual servers has been set up in a lab en...; Question 138: An organization wants to allow its employees to receive corp...; Question 139: An administrator has noticed mobile devices from an adjacent...; Question 140: A company wants to secure a newly developed application that...; Question 141: A financial services company has proprietary trading algorit...; Question 142: Company leadership believes employees are experiencing an in...; Question 143: The information security manager of an e-commerce company re...; Question 144: A technician is reviewing the following log: (Exhibit) Which...; Question 145: A security administrator is concerned about the increasing n...; Question 146: A security analyst for a bank received an anonymous tip on t...; Question 147: A SaaS provider decides to offer data storage as a service. ...; Question 148: A company that has been breached multiple times is looking t...; Question 149: An organization is currently working with a client to migrat...; Question 150: A security engineer is attempting to convey the importance o...; Question 151: A company is implementing a new secure identity application,...; Question 152: A company contracts a security consultant to perform a remot...; Question 153: An attacker wants to gain information about a company's data...; Question 154: Which of the following is an external pressure that causes c...; Question 155: The SOC is reviewing processes and procedures after a recent...; Question 156: A Chief Information Security Officer (CISO) needs to create ...; Question 157: A company's Internet connection is commonly saturated during...; Question 158: First responders, who are part of a core incident response t...; Question 159: A network service on a production system keeps crashing at r...; Question 160: After an employee was terminated, the company discovered the...; Question 161: Following a recent data breach, a company has hired a new Ch...; Question 162: A security architect is reviewing the code for a company's f...; Question 163: A software company is releasing a new mobile application to ...; Question 164: When of the following is the BEST reason to implement a sepa...; Question 165: As part of the development process for a new system, the org...; Question 166: An engineer is reviewing the security architecture for an en...; Question 167: A manufacturing company employs SCADA systems to drive assem...; Question 168: The Chief Executive Officer (CEO) of a small startup company...; Question 169: An organization is considering the use of a thin client arch...; Question 170: A Chief Information Security Officer (CISO) is creating a se...; Question 171: A company runs a well -attended, on-premises fitness club fo...; Question 172: A Chief Information Security Officer (CISO) has created a su...; Question 173: A legacy web application, which is being used by a hospital,...; Question 174: Given the following: (Exhibit) Which of the following vulner...; Question 175: A hospital is deploying new imaging softwares that requires ...; Question 176: An organization's network security administrator has been us...; Question 177: A financial institution would like to store its customer dat...; Question 178: While conducting a BIA for a proposed acquisition, the IT in...; Question 179: A cloud architect needs to isolate the most sensitive portio...; Question 180: While the code is still in the development environment, a se...

Question 74/180

LEAVE A REPLY

Download PDF File