nerdexam
CompTIA

CAS-005 · Question #132

SIMULATION A security engineer needs to review the configurations of several devices on the network to meet the following requirements: - The PostgreSQL server must only allow connectivity in the…

This is a simulation question requiring the review and remediation of device configurations across multiple hosts to meet specific security requirements, including network connectivity, service hardening, and data protection.

Submitted by carter_n· Mar 6, 2026Security Engineering

Question

SIMULATION A security engineer needs to review the configurations of several devices on the network to meet the following requirements:

  • The PostgreSQL server must only allow connectivity in the 10.1.2.0/24 subnet.
  • The SSH daemon on the database server must be configured to listen to port 4022.
  • The SSH daemon must only accept connections from a single workstation.
  • All host-based firewalls must be disabled on all workstations.
  • All devices must have the latest updates from within the past eight days.
  • All HDDs must be configured to secure data at rest.
  • Cleartext services are not allowed.
  • All devices must be hardened when possible.

INSTRUCTIONS Click on the various workstations and network devices to review the posture assessment results. Remediate any possible issues or indicate that no issue is found. Click on Server A to review output data. Select commands in the appropriate tab to remediate connectivity problems to the PostgreSQL database via SSH. If at any time you would like to bring back the initial state of the simulation, please click the Reset All button. Answer:

Exhibits

CAS-005 question #132 exhibit 1
CAS-005 question #132 exhibit 2
CAS-005 question #132 exhibit 3
CAS-005 question #132 exhibit 4
CAS-005 question #132 exhibit 5
CAS-005 question #132 exhibit 6
CAS-005 question #132 exhibit 7
CAS-005 question #132 exhibit 8
CAS-005 question #132 exhibit 9
CAS-005 question #132 exhibit 10
CAS-005 question #132 exhibit 11
CAS-005 question #132 exhibit 12
CAS-005 question #132 exhibit 13
CAS-005 question #132 exhibit 14
CAS-005 question #132 exhibit 15
CAS-005 question #132 exhibit 16
CAS-005 question #132 exhibit 17
CAS-005 question #132 exhibit 18
CAS-005 question #132 exhibit 19
CAS-005 question #132 exhibit 20
CAS-005 question #132 exhibit 21
CAS-005 question #132 exhibit 22
CAS-005 question #132 exhibit 23
CAS-005 question #132 exhibit 24
CAS-005 question #132 exhibit 25
CAS-005 question #132 exhibit 26

Explanation

This is a simulation question requiring the review and remediation of device configurations across multiple hosts to meet specific security requirements, including network connectivity, service hardening, and data protection.

Concept tested. Server hardening, network security, service configuration

Reference. learn.microsoft.com/en-us/windows-server/security/security-compliance-2016/cis-benchmark

Community Discussion

No community discussion yet for this question.

Full CAS-005 Practice