CAS-003 Exam Dumps | During a security event investigation, a junior analyst fails to create an image of a server's hard drive

<< Prev Question Next Question >>

Question 136/194

During a security event investigation, a junior analyst fails to create an image of a server's hard drive before removing the drive and sending it to the forensics analyst. Later, the evidence from the analysis is not usable in the prosecution of the attackers due to the uncertainty of tampering. Which of the following should the junior analyst have followed?

A. Continuity of operations

B. Chain of custody

C. Order of volatility

D. Data recovery

Question List (194q): Question 1: Two competing companies experienced similar attacks on their...; Question 2: The Chief Information Officer (CIO) wants to increase securi...; Question 3: A company has completed the implementation of technical and ...; Question 4: Following a complete outage of the electronic medical record...; Question 5: Following a recent outage a systems administrator is conduct...; Question 6: A business is growing and starting to branch out into other ...; Question 7: An organization relies heavily on third-party mobile applica...; Question 8: A security engineer is troubleshooting an issue in which an ...; Question 9: The security administrator of a small firm wants to stay cur...; Question 10: Providers at a healthcare system with many geographically di...; Question 11: A company has deployed MFA Some employees, however, report t...; Question 12: A security engineer is assessing the controls that are in pl...; Question 13: An organization's network security administrator has been us...; Question 14: A company recently implemented a variety of security service...; Question 15: An organization is evaluating options related to moving orga...; Question 16: The SOC is reviewing processes and procedures after a recent...; Question 17: When implementing a penetration testing program, the Chief I...; Question 18: A networking administrator was recently promoted to security...; Question 19: The results of an external penetration test for a software d...; Question 20: A security administrator receives reports that several works...; Question 21: An organization wants to allow its employees to receive corp...; Question 22: Drag and drop the cloud deployment model to the associated u...; Question 23: While conducting online research about a company to prepare ...; Question 24: A security administrator wants to implement two-factor authe...; Question 25: While an employee is on vacation, suspicion arises that the ...; Question 26: An enterprise is configuring an SSL client-based VPN for cer...; Question 27: A network service on a production system keeps crashing at r...; Question 28: A company wants to extend its help desk availability beyond ...; Question 29: A system administrator recently conducted a vulnerability sc...; Question 30: An application development company implements object reuse t...; Question 31: A security engineer is performing an assessment again for a ...; Question 32: A software development team is conducting functional and use...; Question 33: A vendor develops a mobile application for global customers....; Question 34: A network engineer is attempting to design-in resiliency cha...; Question 35: A system engineer is reviewing output from a web application...; Question 36: A company has decided to lower costs by conducting an intern...; Question 37: While traveling to another state, the Chief Financial (CFO) ...; Question 38: An SQL database is no longer accessible online due to a rece...; Question 39: A company has gone through a round of phishing attacks. More...; Question 40: A PaaS provider deployed a new product using a DevOps method...; Question 41: A security architect has been assigned to a new digital tran...; Question 42: During a security assessment, an organization is advised of ...; Question 43: The information security manager of an e-commerce company re...; Question 44: A security analyst who is concerned about sensitive data exf...; Question 45: The risk subcommittee of a corporate board typically maintai...; Question 46: A security consultant is conducting a penetration test again...; Question 47: A financial institution would like to store its customer dat...; Question 48: A penetration tester noticed special characters in a databas...; Question 49: A company wants to configure its wireless network to require...; Question 50: Users have been reporting unusual automated phone calls, inc...; Question 51: A new corporate policy requires that all employees have acce...; Question 52: The Chief Executive Officer (CEO) of a small startup company...; Question 53: A company has created a policy to allow employees to use the...; Question 54: A security administrator adding a NAC requirement for all VP...; Question 55: An application has been through a peer review and regression...; Question 56: A global company has decided to implement a cross-platform b...; Question 57: A company uses AD and RADIUS to authenticate VPN and WiFi co...; Question 58: A company recently experienced a period of rapid growth, and...; Question 59: A company's security policy states any remote connections mu...; Question 60: An e-commerce company that provides payment gateways is conc...; Question 61: A server (10.0.0.2) on the corporate network is experiencing...; Question 62: An investigation showed a worm was introduced from an engine...; Question 63: A new security policy slates all wireless and wired authenti...; Question 64: A security assessor is working with an organization to revie...; Question 65: A security architect is determining the best solution for a ...; Question 66: The board of a financial services company has requested that...; Question 67: An analyst is investigating behavior on a corporate-owned, c...; Question 68: A company's Internet connection is commonly saturated during...; Question 69: A security analyst is reviewing the following company requir...; Question 70: A company is the victim of a phishing and spear-phishing cam...; Question 71: Ann, a security administrator, is conducting an assessment o...; Question 72: An organization implemented a secure boot on its most critic...; Question 73: A company that has been breached multiple times is looking t...; Question 74: A medical facility wants to purchase mobile devices for doct...; Question 75: A company is in the process of re-architecting its sensitive...; Question 76: Several recent ransomware outbreaks at a company have cost a...; Question 77: Following a security assessment, the Chief Information Secur...; Question 78: A company has entered into a business agreement with a busin...; Question 79: A security analyst is reviewing weekly email reports and fin...; Question 80: With which of the following departments should an engineer f...; Question 81: The Chief Information Security Officer (CISO) of an organiza...; Question 82: A systems administrator has installed a disk wiping utility ...; Question 83: An organization is currently performing a market scan for ma...; Question 84: After analyzing code, two developers al a company bring thes...; Question 85: An internal penetration tester finds a legacy application th...; Question 86: A project manager is working with a team that is tasked to d...; Question 87: A developer implement the following code snippet. (Exhibit) ...; Question 88: An organization is implementing a virtualized thin-client so...; Question 89: A security manager wants to implement a policy that will man...; Question 90: A regional business is expecting a severe winter storm next ...; Question 91: A security analyst has been assigned incident response dutie...; Question 92: Users have reported that an internally developed web applica...; Question 93: An insurance company has two million customers and is resear...; Question 94: A systems administrator recently joined an organization and ...; Question 95: A recent CRM upgrade at a branch office was completed after ...; Question 96: While the code is still in the development environment, a se...; Question 97: An internal penetration tester was assessing a recruiting pa...; Question 98: A hospital is using a functional magnetic resonance imaging ...; Question 99: A Chief Information Security Officer (CISO) is creating a se...; Question 100: A security analyst sees some suspicious entries in a log fil...; Question 101: A health company has reached the physical and computing capa...; Question 102: Compliance with company policy requires a quarterly review o...; Question 103: A newly hired systems administrator is trying to connect a n...; Question 104: The security configuration management policy states that all...; Question 105: An infrastructure team is at the end of a procurement proces...; Question 106: As a result of an acquisition, a new development team is bei...; Question 107: A Chief Information Security Officer (CISO) has created a su...; Question 108: A security engineer at a company is designing a system to mi...; Question 109: An organization is in the process of integrating its operati...; Question 110: An organization is improving its web services to enable bett...; Question 111: Staff members are reporting an unusual number of device thef...; Question 112: A security technician receives a copy of a report that was o...; Question 113: A security engineer wants to introduce key stretching techni...; Question 114: A product owner is reviewing the output of a web-application...; Question 115: As part of the development process for a new system, the org...; Question 116: One of the objectives of a bank is to instill a security awa...; Question 117: An online bank has contracted with a consultant to perform a...; Question 118: A red team is able to connect a laptop with penetration test...; Question 119: A company recently implemented a new cloud storage solution ...; Question 120: An electric car company hires an IT consulting company to im...; Question 121: A company has made it a spending priority to implement secur...; Question 122: Immediately following the report of a potential breach, a se...; Question 123: A development team releases updates to an application regula...; Question 124: An information security manager is concerned that connectivi...; Question 125: Which of the following attacks can be mitigated by proper da...; Question 126: A security analyst is reading the results of a successful ex...; Question 127: An attacker exploited an unpatched vulnerability in a web fr...; Question 128: A recent overview of the network's security and storage appl...; Question 129: An organization is concerned that its hosted web servers are...; Question 130: A security architect is designing a system to satisfy user d...; 1 commentQuestion 131: An organization's mobile device inventory recently provided ...; Question 132: A security manager needed to protect a high-security data ce...; Question 133: A security engineer is deploying an IdP to broker authentica...; Question 134: As part of incident response, a technician is taking an imag...; Question 135: An advanced threat emulation engineer is conducting testing ...; Question 136: During a security event investigation, a junior analyst fail...; Question 137: A company's user community is being adversely affected by va...; Question 138: Company A is establishing a contractual with Company B. The ...; Question 139: A request has been approved for a vendor to access a new int...; Question 140: A vulnerability was recently announced that allows a malicio...; Question 141: A core router was manipulated by a credentialed bypass to se...; Question 142: A pharmacy gives its clients online access to their records ...; Question 143: Given the following output from a security tool in Kali: (Ex...; Question 144: An international e-commerce company has identified attack tr...; Question 145: A company wants to perform analysis of a tool that is suspec...; Question 146: During the migration of a company's human resources applicat...; Question 147: A security administrator is opening connectivity on a firewa...; Question 148: Given the following code snippet: (Exhibit) Of which of the ...; Question 149: During the decommissioning phase of a hardware project, a se...; Question 150: A Chief Information Security Officer (CISO) is developing a ...; Question 151: A system owner has requested support from data owners to eva...; Question 152: A company is acquiring incident response and forensic assist...; Question 153: A company is deploying a DIP solution and scanning workstati...; Question 154: An organization, which handles large volumes of PII, allows ...; Question 155: An analyst has noticed unusual activities in the SIEM to a ....; Question 156: Company.org has requested a black-box security assessment be...; Question 157: Which of the following attacks can be used to exploit a vuln...; Question 158: A company's Chief Information Security Officer (CISO) is wor...; Question 159: The Chief Executive Officer (CEO) instructed the new Chief I...; Question 160: An organization has recently deployed an EDR solution across...; Question 161: A security consultant is attempting to discover if the compa...; Question 162: The Chief Information Security Officer (CISO) is preparing a...; Question 163: During a security assessment, activities were divided into t...; Question 164: The Chief Information Officer (CIO) has been asked to develo...; Question 165: A development team is testing an in-house-developed applicat...; Question 166: A forensics analyst suspects that a breach has occurred. Sec...; Question 167: A company contracts a security consultant to perform a remot...; Question 168: An organization is deploying IoT locks, sensors, and cameras...; Question 169: A new security policy states all wireless and wired authenti...; Question 170: A security appliance vendor is reviewing an RFP that is requ...; Question 171: A security controls assessor intends to perform a holistic c...; Question 172: A security analyst for a bank received an anonymous tip on t...; Question 173: Which of the following is an external pressure that causes c...; Question 174: A company makes consumer health devices and needs to maintai...; Question 175: After the departure of a developer under unpleasant circumst...; Question 176: An organization just merged with an organization in another ...; Question 177: A financial services company wants to migrate its email serv...; Question 178: A security administrator wants to implement an MDM solution ...; Question 179: The government is concerned with remote military missions be...; Question 180: A security administrator wants to allow external organizatio...; Question 181: A company uses an application in its warehouse that works wi...; Question 182: After significant vulnerabilities and misconfigurations were...; Question 183: A technician receives the following security alert from the ...; Question 184: A legacy web application, which is being used by a hospital,...; Question 185: A Chief Information Security Officer (CISO) implemented MFA ...; Question 186: A security architect is implementing security measures in re...; Question 187: A DevOps team wants to move production data into the QA envi...; Question 188: The Chief Financial Officer (CFO) of a major hospital system...; Question 189: A security analyst has requested network engineers integrate...; Question 190: A software development firm wants to validate the use of sta...; Question 191: Ann, a corporate executive, has been the recent target of in...; Question 192: An organization designs and develops safety-critical embedde...; Question 193: An incident responder wants to capture volatile memory compr...; Question 194: A company has hired an external security consultant to condu...

Question 136/194

LEAVE A REPLY

Download PDF File