CASP 004 Day 2

A global bank must ensure private encryption keys are stored securely to protect customer transactions. Where is best?

You must ensure equipment on the DMZ cannot be remotely configured from the internet. What ports would be blocked? (two)

What control will BEST mitigate the threat of a zone transfer from a malicious Domain Name Server?

Ann the CFO has been re-directed on multiple occasion's to fake banking websites. What would be the BEST remediation?

Security Engineers must ensure HTTP headers are enabled for all client access to applications. What will be configured?

Network security engineers need a low latency solution to understand bandwidth usage and types of traffic flow?

Protects users from directly connecting to unsafe sites. Offers URL, content filtering & performance enhancements.

A development methodology that allows for fixed costs, but does not involve the customer after the requirements phase?

What type of software testing is used when there has been a change within one of the code modules?

What is sometimes described as middleware, allowing for communication between legacy systems & incompatable services?

A application aware technology to filter out malcious traffic targeting a public facing e-commerce server?

An EAP authentication type that requires certificates to be deployed on the supplicant (client) and the AAA server?

During the SDLC process what is the first step?

A company is concerned that sales targets arent being achieved due to poor management of sales opportunities. Solution?

What is used to moniter industrial, scientific, and medical environments to Display, gather, and process real-time data

A CISO must ensure the enterprise does not breach legal or regulatory compliance by exfiltration of senstive data?

What is used to Deploy, Monitor, Scale, and when there is an outage can restart failed containers?

A U.S government agency was founded in 2018, offering guidance and helping to build secure and resilient infrastructure?

What is used to aggregate and correlate logs to present in a real-time reporting dashboard?

Application code is tested in real time using sensors and deployed agents to detect any potential vulnerabilities?