CASP 004 Day 2

Protects users from directly connecting to unsafe sites. Offers URL, content filtering & performance enhancements.

Application code is tested in real time using sensors and deployed agents to detect any potential vulnerabilities?

What is used to moniter industrial, scientific, and medical environments to Display, gather, and process real-time data

A development methodology that allows for fixed costs, but does not involve the customer after the requirements phase?

What is sometimes described as middleware, allowing for communication between legacy systems & incompatable services?

Ann the CFO has been re-directed on multiple occasion's to fake banking websites. What would be the BEST remediation?

You must ensure equipment on the DMZ cannot be remotely configured from the internet. What ports would be blocked? (two)

A company is concerned that sales targets arent being achieved due to poor management of sales opportunities. Solution?

A CISO must ensure the enterprise does not breach legal or regulatory compliance by exfiltration of senstive data?

During the SDLC process what is the first step?

What type of software testing is used when there has been a change within one of the code modules?

What is used to Deploy, Monitor, Scale, and when there is an outage can restart failed containers?

Network security engineers need a low latency solution to understand bandwidth usage and types of traffic flow?

An EAP authentication type that requires certificates to be deployed on the supplicant (client) and the AAA server?

A global bank must ensure private encryption keys are stored securely to protect customer transactions. Where is best?

A U.S government agency was founded in 2018, offering guidance and helping to build secure and resilient infrastructure?

Security Engineers must ensure HTTP headers are enabled for all client access to applications. What will be configured?

A application aware technology to filter out malcious traffic targeting a public facing e-commerce server?

What is used to aggregate and correlate logs to present in a real-time reporting dashboard?

What control will BEST mitigate the threat of a zone transfer from a malicious Domain Name Server?