A new cluster of virtual servers has been set up in a lab environment and must be audited before being allowed on the production network. The security manager needs to ensure unnecessary services are disabled and all system accounts are using strong credentials.
Which of the following tools should be used? (Choose two.)
A. Fuzzer
B. SCAP scanner
C. Packet analyzer
D. Password cracker
E. Network enumerator
F. SIEM
How to PASS CAS-004 in First Attempt?FULL Printable PDF and Software. VALID exam to help you PASS. |
 |
BF
I like the explanation provided by StudyB but CompTIA includes Compliance as 1 of the 8 primary SIEM functions:
“SIEM applications can be employed to automate the gathering of compliance data and produce reports that meet governance and auditing requirements.”
BE
*Security Content Automation Protocol (SCAP) Scan is method for using known standards to run vulnerability and compliance scans. This allows the user to evaluate and secure their systems.
*A network enumerator or network scanner is a computer program used to retrieve usernames and info on groups, shares, and services of networked computers.
A. Fuzzer (testing with malformed data)
B. SCAP scanner (yes, scan system for compliance)
C. Packet analyzer (capture traffic for analysis)
D. Password cracker (brute force cracking password)
E. Network enumerator (yes, scan network equipment for info)
F. SIEM (make sense of logs)
SCAP scanner will show result of “complex password” implementation, or it would show no password requirement.
D. Password cracker
E. Network enumerator
Password cracker test password strength by guessing.
Network enumerator shows what services are running on an insecure system.
It has to be B and E
A SIEM would not be used in this scenario
E and F
why not B and F
SCAP scanner and SIEM officially drive me crazy BUT I have noticed with a few other questions SCAP scanner seems to be used for auditing and verifying if accounts are using strong credentials. Unless I am getting it wrong, I have gone over these again and again. Some of these questions, still have me questioning myself lol
Yes, same here
E. Network enumerator and B. SCAP scanner
Anyone have another view on this?
Why not B, F – SIEM is used for audit purposes too!
A SIEM will not register or measure the strenght of password nor if the ports are open/closed.
Agree with B and E.