exam questions

Exam CAS-004 All Questions

View all questions & answers for the CAS-004 exam

Exam CAS-004 topic 1 question 34 discussion

Actual exam question from CompTIA's CAS-004
Question #: 34
Topic #: 1
[All CAS-004 Questions]

Device event logs sourced from MDM software as follows:

Which of the following security concerns and response actions would BEST address the risks posed by the device in the logs?

  • A. Malicious installation of an application; change the MDM configuration to remove application ID 1220.
  • B. Resource leak; recover the device for analysis and clean up the local storage.
  • C. Impossible travel; disable the device's account and access while investigating.
  • D. Falsified status reporting; remotely wipe the device.
Show Suggested Answer Hide Answer
Suggested Answer: C 🗳️

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
armid
5 months, 3 weeks ago
Selected Answer: C
but.. what IF he used VPN? xD
upvoted 2 times
...
ElDirec
10 months, 3 weeks ago
Selected Answer: C
Qatar vs Washington DC at the same time
upvoted 2 times
...
Chimpeth
1 year, 4 months ago
Selected Answer: C
Push events are generally sent form MDM administrators or Systems. Impossible travel.
upvoted 2 times
...
BiteSize
1 year, 5 months ago
Selected Answer: C
Two Timestamps at 0701 with two different locations
upvoted 2 times
...
margomi86
1 year, 9 months ago
Selected Answer: A
Based on the device event logs, the security concern and response action that would BEST address the risks posed by the device are: Security Concern: Malicious installation of an application. Response Action: Change the MDM configuration to remove application ID 1220. Therefore, the answer is option A.
upvoted 2 times
...
FOURDUE
1 year, 11 months ago
Selected Answer: C
Review the check in times and location. there is no way someone can travel that distance. C
upvoted 3 times
...
Rj100
1 year, 11 months ago
Answer A
upvoted 1 times
...
ccryptix
2 years, 2 months ago
Selected Answer: C
Due to line 4, a GPS spoofing could be in use either by the newly install app, or before the app was installed.
upvoted 2 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago