CompTIA RC0-C02 : CompTIA Advanced Security Practitioner (CASP) Recertification Exam for Continuing Education

A software developer and IT administrator are focused on implementing security in the organization to protect OSI layer 7. Which of the following security technologies would BEST meet their requirements?
(Select TWO).

• A. NIDS
• B. NIPS
• C. HIPS
• D. HSM
• E. WAF

A company runs large computing jobs only during the overnight hours. To minimize the amount of capital investment in equipment, the company relies on the elastic computing services of a major cloud computing vendor. Because the virtual resources are created and destroyed on the fly across a large pool of shared resources, the company never knows which specific hardware platforms will be used from night to night. Which of the following presents the MOST risk to confidentiality in this scenario?

• A. Network transmission of cryptographic keys
• B. Loss of physical control of the servers
• C. Data scraped from the hardware platforms
• D. Distribution of the job to multiple data centers

A penetration tester is assessing a mobile banking application. Man-in-the-middle attempts via an HTTP intercepting proxy are failing with SSL errors. Which of the following controls has likely been implemented by the developers?

• A. SSL certificate revocation
• B. SSL certificate pinning
• C. Mobile device root-kit detection
• D. Extended Validation certificates

The Information Security Officer (ISO) believes that the company has been targeted by cybercriminals and it is under a cyber attack. Internal services that are normally available to the public via the Internet are inaccessible, and employees in the office are unable to browse the Internet. The senior security engineer starts by reviewing the bandwidth at the border router, and notices that the incoming bandwidth on the router's external interface is maxed out. The security engineer then inspects the following piece of log to try and determine the reason for the downtime, focusing on the company's external router's IP which is
1 28.20.176.19:
1 1:16:22.110343 IP 90.237.31.27.19 > 128.20.176.19.19: UDP, length 1400
1 1:16:22.110351 IP 23.27.112.200.19 > 128.20.176.19.19: UDP, length 1400
1 1:16:22.110358 IP 192.200.132.213.19 > 128.20.176.19.19: UDP, length 1400
1 1:16:22.110402 IP 70.192.2.55.19 > 128.20.176.19.19: UDP, length 1400
1 1:16:22.110406 IP 112.201.7.39.19 > 128.20.176.19.19: UDP, length 1400
Which of the following describes the findings the senior security engineer should report to the ISO and the
BEST solution for service restoration?

• A. After the senior engineer used the above IPS logs to detect the ongoing DDOS attack, an IPS filter should be enabled to block the attack and restore communication.
• B. After the senior engineer used a network analyzer to identify an active Fraggle attack, the company's
  ISP should be contacted and instructed to block the malicious packets.
• C. After the senior engineer used a mirror port to capture the ongoing amplification attack, a BGP sinkhole should be configured to drop traffic at the source networks.
• D. After the senior engineer used a packet capture to identify an active Smurf attack, an ACL should be placed on the company's external router to block incoming UDP port 19 traffic.

The Information Security Officer (ISO) is reviewing new policies that have been recently made effective and now apply to the company. Upon review, the ISO identifies a new requirement to implement two-factor authentication on the company's wireless system. Due to budget constraints, the company will be unable to implement the requirement for the next two years. The ISO is required to submit a policy exception form to the Chief Information Officer (CIO). Which of the following are MOST important to include when submitting the exception form? (Select THREE).

• A. All sections of the policy that may justify non-implementation of the requirements.
• B. Risks associated with the inability to implement the requirements.
• C. Current and planned controls to mitigate the risks.
• D. Internal procedures that may justify a budget submission to implement the new requirement.
• E. Business or technical justification for not implementing the requirements.
• F. Industry best practices with respect to the technical implementation of the current controls.
• G. A revised DRP and COOP plan to the exception form.