CAS-001 무료 덤프문제 온라인 액세스

Ann, a Physical Security Manager, is ready to replace all 50 analog surveillance cameras with IP cameras with built-in web management. Ann has several security guard desks on different networks that must be able to view the cameras without unauthorized people viewing the video as well. The selected IP camera vendor does not have the ability to authenticate users at the camera level. Which of the following should Ann suggest to BEST secure this environment?

• A.Create an IP camera network and restrict access to cameras from a single management host.
• B.Create an IP camera network and deploy NIPS to prevent unauthorized access.
• C.Create an IP camera network and only allow SSL access to the cameras.
• D.Create an IP camera network and deploy a proxy to authenticate users prior to accessing the cameras.

At 9:00 am each morning, all of the virtual desktops in a VDI implementation become extremely slow and/or unresponsive. The outage lasts for around 10 minutes, after which everything runs properly again. The administrator has traced the problem to a lab of thin clients that are all booted at 9:00 am each morning. Which of the following is the MOST likely cause of the problem and the BEST solution? (Select TWO).

• A.A backup is running on the thin clients at 9am every morning.
• B.Add guests with more memory to increase capacity of the infrastructure.
• C.Install more memory in the thin clients to handle the increased load while booting.
• D.Booting all the lab desktops at the same time is creating excessive I/O.
• E.Install faster SSD drives in the storage system used in the infrastructure.
• F.The lab desktops are using more memory than is available to the host systems.
• G.The lab desktops are saturating the network while booting.
• H.Install 10-Gb uplinks between the hosts and the lab to increase network capacity.

A company is in the process of outsourcing its customer relationship management system to a cloud provider. It will host the entire organization's customer database. The database will be accessed by both the company's users and its customers. The procurement department has asked what security activities must be performed for the deal to proceed.
Which of the following are the MOST appropriate security activities to be performed as part of due diligence? (Select TWO).

• A.Penetration testing of the solution to ensure that the customer data is well protected.
• B.Security clauses are implemented into the contract such as the right to audit.
• C.Review of the organizations security policies, procedures and relevant hosting certifications.
• D.Code review of the solution to ensure that there are no back doors located in the software.
• E.Physical penetration test of the datacenter to ensure there are appropriate controls.

A financial company implements end-to-end encryption via SSL in the DMZ, and only IPSec in transport mode with AH enabled and ESP disabled throughout the internal network. The company has hired a security consultant to analyze the network infrastructure and provide a solution for intrusion prevention. Which of the following recommendations should the consultant provide to the security administrator?

• A.Switch IPSec to tunnel mode. Implement HIPS on the internal network, and NIPS on the DMZ.
• B.Disable AH. Enable ESP on the internal network, and use NIPS on both networks.
• C.Switch to TLS in the DMZ. Implement NIPS on the internal network, and HIPS on the DMZ.
• D.Enable ESP on the internal network, and place NIPS on both networks.

A company has received the contract to begin developing a new suite of software tools to replace an aging collaboration solution. The original collaboration solution has been in place for nine years, contains over a million lines of code, and took over two years to develop originally. The SDLC has broken the primary delivery stages into eight different deliverables, with each section requiring an in-depth risk analysis before moving on to the next phase. Which of the following software development methods is MOST applicable?

• A.Incremental model
• B.Waterfall model
• C.Agile model
• D.Spiral model