CompTIA Advanced Security Practitioner (CASP) - CAS-002무료 덤프문제 풀어보기

A. WAF and SIEM

B. UTM and HSM

C. UTM and NIDS

D. DAM and SIEM

E. WAF and DAM

A. Provide the 1Tb of files on the network and the 300Mb of email files regardless of age.

B. Delete files and email exceeding policy thresholds and turn over the remaining files and email.

C. Provide the first 200Mb of e-mail and the first 500Mb of files as per policy.

D. Delete email over the policy threshold and hand over the remaining emails and all of the files.

A. Implement CCTV cameras at both points.

B. Hire an HVAC person for the company, eliminating the need for external HVAC people.

C. Implement a policy that all non-employees should be escorted in the data center.

D. Place a mantrap at the points with biometric security.

A. Information classification, vendor selection, and the RFP process

B. Creation and secure destruction of mail accounts, emails, and calendar items

C. Data provisioning, processing, in transit, at rest, and de-provisioning

D. Securing virtual environments, appliances, and equipment that handle email

A. Establish a risk matrix

B. Provide a business justification for a risk exception

C. Inherit the risk for six months

D. Provide a business justification to avoid the risk

A. Use fuzzing techniques to examine application inputs

B. Use a packet analyzer to inspect the strings

C. Run nmap to attach to application memory

D. Initiate a core dump of the application

E. Use an HTTP interceptor to capture the text strings

A. DNS poisoning

B. ARP poisoning

C. Improper LUN masking

D. Improper network zoning

A. Implement desktop virtualization and encrypt all sensitive data at rest and in transit.

B. Move the critical applications to a private cloud and disable VPN and tunneling.

C. Implement VDI and disable hardware and storage mapping from the thin client.

D. Implement server virtualization and move the application from the desktop to the server.

A. The initial request for proposal drafted during the merger.

B. New regulatory compliance requirements.

C. The business continuity plan in place at the small business.

D. Service level agreements between the small and the large business.

E. How the large business operational procedures are implemented.

F. The memorandum of understanding between the two businesses.

A. After the senior engineer used the above IPS logs to detect the ongoing DDOS attack, an IPS filter should be enabled to block the attack and restore communication.

B. After the senior engineer used a packet capture to identify an active Smurf attack, an ACL should be placed on the company's external router to block incoming UDP port 19 traffic.

C. After the senior engineer used a network analyzer to identify an active Fraggle attack, the company's ISP should be contacted and instructed to block the malicious packets.

D. After the senior engineer used a mirror port to capture the ongoing amplification attack, a BGP sinkhole should be configured to drop traffic at the source networks.

A. A physical site audit is performed on Company XYZ's management / operation.

B. Internal auditors have approved the outsourcing arrangement.

C. Ensure there are security controls within the contract and the right to audit.

D. Penetration testing can be performed on the externally facing web system.

A. Secure protocols for transmission of log files and search results

B. At least two years retention of log files in case of e-discovery requests

C. Multi-tenancy with RBAC support

D. Secure storage and transmission of API keys

E. Encryption of logical volumes on which the customers' log files reside

F. Sanitizing filters to prevent upload of sensitive log file contents

A. The company should ensure that the company has sufficient bandwidth to allow for social media traffic.

B. The company must dedicate specific staff to act as social media representatives of the company.

C. The security policy needs to be reviewed to ensure that social media policy is properly implemented.

D. Senior staff blogs should be ghost written by marketing professionals.

E. All staff needs to be instructed in the proper use of social media in the work environment.

F. The finance department must provide a cost benefit analysis for social media.

A. The system does not implement proper garbage collection.

B. The system does not implement input validation.

C. The system does not protect against buffer overflows properly.

D. The system is susceptible to integer overflow.

A. The user is providing entropy so the application can use random data to create the key pair.

B. The user needs a non-repudiation data source in order for the application to generate the key pair.

C. The application is requesting perfect forward secrecy from the user in order to create the key pair.

D. The user is providing a diffusion point to the application to aid in creating the key pair.