O GoConqr está de visual novo! Conte para nós o que você achou.

Registre-se grátis

Quiz

CASP PreTest #2

michael smith0754 20 perguntas 4,3 (3 avaliações)

Fazer o quiz

Perguntas do quiz (20)

  1. 1The Chief Information Security Officer (CISO) at a company knows that many users store business documents on public cloud-based storage, and realizes this is a risk to the company. In response, the CISO implements a mandatory training course in which all employees are instructed on the proper use of cloud-based storage. Which of the following risk strategies did the CISO implement?
    1. AAvoid
    2. BAccept
    3. CMitigate
    4. DTransfer
  2. 2A forensic analyst receives a hard drive containing malware quarantined by the antivirus application. After creating an image and determining the directory location of the malware file, which of the following helps to determine when the system became infected?
    1. AThe malware file’s modify, access, change time properties.
    2. BThe timeline analysis of the file system.
    3. CThe time stamp of the malware in the swap file.
    4. DThe date/time stamp of the malware detection in the antivirus logs.
  3. 3The Chief Executive Officer (CEO) of a company that allows telecommuting has challenged the Chief Security Officer’s (CSO) request to harden the corporate network’s perimeter. The CEO argues that the company cannot protect its employees at home, so the risk at work is no different. Which of the following BEST explains why this company should proceed with protecting its corporate network boundary?
    1. AThe corporate network is the only network that is audited by regulators and customers.
    2. BThe aggregation of employees on a corporate network makes it a more valuable target for attackers.
    3. CHome networks are unknown to attackers and less likely to be targeted directly.
    4. DEmployees are more likely to be using personal computers for general web browsing when they are at home.
  4. 4
    A security officer is leading a lessons learned meeting. Which of the following should be components of that meeting? (Select TWO).
    1. ADemonstration of IPS system
    2. BReview vendor selection process
    3. CCalculate the ALE for the event
    4. DDiscussion of event timeline
    5. EAssigning of follow up items
  5. 5
    An assessor identifies automated methods for identifying security control compliance through validating sensors at the endpoint and at Tier 2. Which of the following practices satisfy continuous monitoring of authorized information systems?
    1. AIndependent verification and validation
    2. BSecurity test and evaluation
    3. CRisk assessment
    4. DOngoing authorization
  6. 6
    The source workstation image for new accounting PCs has begun blue-screening. A technician notices that the date/time stamp of the image source appears to have changed. The desktop support director has asked the Information Security department to determine if any changes were made to the source image. Which of the following methods would BEST help with this process? (Select TWO).
    1. ARetrieve source system image from backup and run file comparison analysis on the two images.
    2. BParse all images to determine if extra data is hidden using steganography.
    3. CCalculate a new hash and compare it with the previously captured image hash.
    4. DAsk desktop support if any changes to the images were made.
    5. ECheck key system files to see if date/time stamp is in the past six months.
  7. 7A software project manager has been provided with a requirement from the customer to place limits on the types of transactions a given user can initiate without external interaction from another user with elevated privileges. This requirement is BEST described as an implementation of:
    1. Aan administrative control
    2. Bdual control
    3. Cseparation of duties
    4. Dleast privilege
    5. Ecollusion
  8. 8The technology steering committee is struggling with increased requirements stemming from an increase in telecommuting. The organization has not addressed telecommuting in the past. The implementation of a new SSL-VPN and a VOIP phone solution enables personnel to work from remote locations with corporate assets. Which of the following steps must the committee take FIRST to outline senior management’s directives?
    1. ADevelop an information classification scheme that will properly secure data on corporate systems.
    2. BImplement database views and constrained interfaces so remote users will be unable to access PII from personal equipment.
    3. CPublish a policy that addresses the security requirements for working remotely with company equipment.
    4. DWork with mid-level managers to identify and document the proper procedures for telecommuting.
  9. 9
    A company is facing penalties for failing to effectively comply with e-discovery requests. Which of the following could reduce the overall risk to the company from this issue?
    1. AEstablish a policy that only allows filesystem encryption and disallows the use of individual file encryption.
    2. BRequire each user to log passwords used for file encryption to a decentralized repository.
    3. CPermit users to only encrypt individual files using their domain password and archive all old user passwords.
    4. DAllow encryption only by tools that use public keys from the existing escrowed corporate PKI.
  10. 10There have been some failures of the company’s internal facing website. A security engineer has found the WAF to be the root cause of the failures. System logs show that the WAF has been unavailable for 14 hours over the past month, in four separate situations. One of these situations was a two hour scheduled maintenance time, aimed at improving the stability of the WAF. Using the MTTR based on the last month’s performance figures, which of the following calculations is the percentage of uptime assuming there were 722 hours in the month?
    1. A92.24 percent
    2. B98.06 percent
    3. C98.34 percent
    4. D99.72 percent

Informações

Descrição
CASP PreTest study guide
Idioma
English
Visualizações
202
Avaliação
4,3 de 5 · 3 avaliações
Avalie este quiz
Avalie este quiz

Fale Conosco

Sobre o que é sua mensagem?

O que você acha do novo visual?

Você gostou?