RC0-C02 무료 덤프문제 온라인 액세스

A security consultant is conducting a network assessment and wishes to discover any legacy backup
Internet connections the network may have. Where would the consultant find this information and why would it be valuable?

• A.This information can be found by calling the regional Internet registry, and is valuable because backup connections typically do not require VPN access to the network.
• B.This information can be found by querying the network's DNS servers, and is valuable because backup
  DNS servers typically allow recursive queries from Internet hosts.
• C.This information can be found in global routing tables, and is valuable because backup connections typically do not have perimeter protection as strong as the primary connection.
• D.This information can be found by accessing telecom billing records, and is valuable because backup connections typically have much lower latency than primary connections.

A Security Administrator has some concerns about the confidentiality of data when using SOAP.
Which of the following BEST describes the Security Administrator's concerns?

• A.The SOAP header is not encrypted and allows intermediaries to view the header data. The body can be partially or completely encrypted.
• B.The SOAP protocol can be easily tampered with, even though the header is encrypted.
• C.The SOAP protocol supports weak hashing of header information. As a result the header and body can easily be deciphered by brute force tools.
• D.The SOAP protocol does not support body or header encryption which allows assertions to be viewed in clear text by intermediaries.

The internal audit department is investigating a possible breach of security. One of the auditors is sent to interview the following employees:
Employee A: Works in the accounts receivable office and is in charge of entering data into the finance system.
Employee B: Works in the accounts payable office and is in charge of approving purchase orders.
Employee C: Is the manager of the finance department, supervises Employee A and Employee B, and can perform the functions of both Employee A and Employee B.
Which of the following should the auditor suggest be done to avoid future security breaches?

• A.Employee A and Employee B should rotate jobs at a set interval and cross-train.
• B.All employees should have the same access level to be able to check on each others.
• C.The manager should only be able to review the data and approve purchase orders.
• D.The manager should be able to both enter and approve information.

Company policy requires that all company laptops meet the following baseline requirements:
Software requirements:
Antivirus
Anti-malware
Anti-spyware
Log monitoring
Full-disk encryption
Terminal services enabled for RDP
Administrative access for local users
Hardware restrictions:
Bluetooth disabled
FireWire disabled
WiFi adapter disabled
Ann, a web developer, reports performance issues with her laptop and is not able to access any network resources. After further investigation, a bootkit was discovered and it was trying to access external websites. Which of the following hardening techniques should be applied to mitigate this specific issue from reoccurring? (Select TWO).

• A.Restrict/disable TELNET access to network resources
• B.Perform vulnerability scanning on a daily basis
• C.Remove full-disk encryption
• D.Restrict VPN access for all mobile users
• E.Restrict/disable USB access
• F.Remove administrative access to local users
• G.Group policy to limit web access

A company is deploying a new iSCSl-based SAN. The requirements are as follows:
SAN nodes must authenticate each other.
Shared keys must NOT be used.
Do NOT use encryption in order to gain performance.
Which of the following design specifications meet all the requirements? (Select TWO).

• A.Targets use CHAP authentication
• B.IPSec using AH with PSK authentication and 3DES
• C.Initiators and targets use CHAP authentication
• D.Fiber channel should be used with AES
• E.IPSec using AH with PKI certificates for authentication
• F.Targets have SCSI IDs for authentication
• G.Fiber channel over Ethernet should be used