CAS-005 Exam Dumps : CompTIA SecurityX Certification Exam

VPN Concentrator:

A screenshot of a computer Description automatically generated

AAA Server:

A screenshot of a computer Description automatically generated

A central logging server ensures logs are collected in a tamper-proof manner and only ingested (not modified). This prevents attackers from altering logs locally.

Key concepts:

Logs should be centrally stored to prevent tampering.

Enabling log forwarding to a secure SIEM improves integrity.

Other options:

A (File monitoring tool) helps detect file changes but doesn’t prevent log tampering.

B (Changing log solutions) does not inherently improve security.

D (Log rotation and encryption) is best practice but does not prevent modification before transmission.

Code signing uses cryptographic digital signatures to prove that software or updates come from a trusted source and have not been altered. In the SecurityX CAS-005 objectives, this is covered under security engineering and cryptographic assurance mechanisms.

Envelope encryption protects confidentiality but does not authenticate the source.

File integrity monitoring detects file changes but does not confirm the origin of the update.

Application control manages which software can run but does not ensure authenticity of distributed files.Only code signing meets all three objectives: verifying the source, ensuring authorization, and proving integrity.