stud
bud
Sign up
Log in
Home
Library
Explore
SAT
More
CASP Final Flashcards | StudBud
Explore
/
CASP Final
CASP Final
59 terms
·
StudBud Administration
·
48 plays
All Chapters!
Flashcards
59 cards
F
Practice quiz
P
Host live
L
Questions
59
Answers
1
Company X's SAN is nearing capacity, which is a least costly method than increasing SAN SPACE?
Enable multipathing
Implement replacation offsite
Enable deduplication
Implement snapshots
2
A web site uses HTTPS transmissions. What can query the CA to verify the certificate is ok?
RA
CRL
RSA
OCSP
3
Which port does SFTP use?
TCP 25
TCP 110
TCP 80
TCP 22
4
Which of the following is a security advantage of single sign-on?
All transactions are highly encrypted.
Authentication is secured by the certificate authority
Users only have to remember one password.
Applications need to validate authentication tokens.
5
Which of the following authentication types is used primarily to authenticate using of tickets?
RADIUS
LDAP
Kerberos
TACACS+
6
Mandatory training instructing users the proper use of cloud storage is what risk strategy?
Mitigate
Avoid
Transfer
Accept
7
Which of the following is used to query databases about the owners of Internet resources?
Whois
NSLookup
Metasploit
DHCP
8
The software development method that is the most rigid and must procede in order is:
ITIL
Spiral
Waterfall
Agile
9
Access Control Lists
Integrity
Authentication
Availability
Confidentiality
10
Digital Signatures
Authentication
Availability
Confidentiality
Integrity
11
According to CASP, which class of information has the most impact of a business of compromised?
Public
Private
Confidential
Restricted
12
WAF was down for 14 hours, 2 hours planned.. What is the uptime with 722 hours in the month?
92.24
99.72
98.34
98.06
13
A 0-day worm was found over TCP port 445. What can be done short term to minimize the attack?
Run a port scan and patch all hosts with open ports
Run the enterprise AV solution
Deploy the ACL to the HIPS: DENY - TCP - ANY - ANY – 445.
Add to the corporate firewall: DENY - TCP - ANY - ANY – 445
14
A number for all costs, incuding purchasing, as well as managing and maintaining a device is?
NPV
SLE
ROI
TCO
15
Encryption
Confidentiality
Integrity
Authentication
Availability
16
Which of the following describes a certificate that can be used for multiple subdomains?
Trusted Authority
Wildcard
Root CA
CRL
17
Which of the following methods can be used to detect the use of steganography?
Asymmetric Encryption
Symmetric Encryption
Authentication
Integrity Checking
18
Of the following, which is the biggest concern for security personnel?
Ransomware
State Sponsored Hackers
Insider Threats
Website Vulnerabilities
19
You must provide copies of all emails from an employee for 3 years. You cannot. What failed?
Data backup
Offiste Storage
Data retention
Data ownership
20
Of the following, which chip makes full disk encryption possible?
Out-Of-Band
Sealed
Clipper
TPM
21
Hot Site
Authentication
Availability
Integrity
Confidentiality
22
Load Balancing
Availability
Authentication
Integrity
Confidentiality
23
DoS ARO=5 times/yr. Loss is $40,000 each. Solution costs 100,000 and cut to 1 time. Value/yr?
$140,000
$60,000
$100,000
$200,000
24
What is referred to as the delay incurred in the process of network data?
Frequency
Response Rate
Latency
Delay
25
A third party sends a doc. outlining availability, bandwidth and support guarantees. What doc?
OLA
MOU
ISA
SLA
26
An IDS is generating a large number of irrelevant events. Which would BEST remedy this problem?
Change the IDS filter to data mine statistical trending data
Change the IDS to use a heuristic anomaly filter
Adjust IDS filters to increase the number of false negatives
Adjust IDS filters to decrease the number of false positives
27
Of the following, which is NOT a command line utility?
SSH
Telnet
RDP
nslookup
28
An application on 1,000 systems is open to a buffer overflow. Which is the best way to resolve?
Validate and deploy the appropriate patch
Deploy custom NIPS signatures to detect and block.
Run the app. in terminal services to reduce the threat.
Deploy custom HIPS signatures to detect and block
29
A company is looking to purchase a smaller company. What task should security perform first?
Review the security policies and standards
Perform a network penetration test
Review switch and router configurations
Review the firewall rule set and IPS logs
30
Acme has a linux server and wants the location of the hash password file. What is the location?
/etc/passwd
/etc/shadow
/etc/passwd/hash
/etc/root
31
Logs over the past few months show you have been under a password attack. what attack is this?
Cllient-Side Attack
Advanced Persistent Threat
Solical Engineering
Zero-Day attack
32
Rapid succession questions next! "What category of the CIA triad covers the following control?"
Click to continue
Click to continue
Click to continue
Click to continue
33
Your company now allows access to internal resources remotely. What should you do?
Deploy a DMZ
Deploy a WLAN
Deploy a VPN
Deploy a VLAN
34
Which of the following REQUIRES the use of an authentication server such as RADIUS?
Enterprise WPA2
Personal WPA-2
Personal WPA
WEP
35
A security admin is designing a new set of VMs, but wants to secure it with crypto keys. How?
Use a HSM
Use an INE
Use vTPM
Use TPM
36
Virtual hosts with different security requirements should be:
stored on separate physical hosts.
encrypted with a one-time password
moved to the cloud.
scanned for vulnerabilities regularly.
37
Which of the following is the MOST appropriate control measure for lost mobile devices?
Require authentication before access is given to the device.
Require that the compromised devices be remotely wiped.
Reduce the amount of sensitive data stored on the device
Disable unnecessary wireless interfaces such as Bluetooth.
38
Of the following, which does NOT describe a NAS?
A NAS supports high thoroughput
Implementing a NAS is inexpensive
Easily accessible via TCP/IP Ethernet based hardware
Operates on a private network and not the LAN
39
Which of the following describes a risk and mitigation associated with cloud data storage?
R: Offsite replication M: Multi-site backups
R: Data loss from de-duplication M: Dynamic host bus address
R: Shared hardware caused data leakage M: encryption at rest
R: Combined data archiving M: Two-factor authentication
40
What protocol and default port number does SMTP use?
TCP port 443
TCP and UDP port 22
TCP port 25
TCP port 80
41
The "post your comment" field on the company blog page has been exploited. What helps mitigate?
Data validation/sanitation
Patch the web App
Update to HTTPS
Install a HIDS
42
A.K.A. Kennedy Kassebaum Act, this law affects how heathcare data is transmitted and handled
HIPAA
GLBA
CFAA
SOX
43
Of the following; which one defines the acceptable risk level and reduces risk to that level?
Mitigate
Transfer
Accept
Avoid
44
Of the following cloud approaches, which gives the maximum amount of control over the data?
Public
Hybrid
Private
Composite
45
Which of the CIA requirements is BEST met by multipathing for a SAN?
Confidentiality
Integrity
Availability
Authentication
46
Stegnanography
Integrity
Authentication
Confidentiality
Availability
47
How an organization will continue normal operations in the event of a disruption is part of:
CAB
PIR
BIA
BCP
48
Making storage available to some hosts and unavailable to other hosts is done by using what?
Deduplication
Multipathing
LUN masking
Snapshots
49
Which of the following backup rotations uses 3 different sets of tapes along a timeline??
Incremental
FIFO
GFS
Differential
50
New Equipment=100,000 with 5,000 to install. Revenue will increase by 100,000. what is the ROI?
81.8%
45.6%
5.5%
-45%
51
Which of the following should be used to identify overflow vulnerabilities?
Secure Code Standards
Input Validation
Privilege Escalation
Fuzzing
52
Of the following, which does not describe a SAN?
Maintenance can be done without taking the servers offline.
Relatively low investment
Easily scalable with additional storage
Sharing is made easier
53
Overall, what is the primary concern when it comes to PII?
Availability
Confidentiality
Authentication
Integrity
54
Of the following, which is an attack for obtaining access to perform a MiTM attack?
MAC Address overflow
Smurf Attack
Bluejacking
ARP poisoning
55
Contgrols such as digital signatures, checksums and hashes all satisfy what part of the CIA?
Availability
Identification
Confidentiality
Integrity
56
which protocol provides authentication but sends the credentials in cleartext & can be sniffed?
CHAP
CHAPv2
PAP
EAP
57
A small storage device connected to the LAN that acts similar to a file server is known as?
SAN
Virtual Storage
Cloud Storage
NAS
58
Which policy would help to allow co-workers to audit another worker's position?
Manditory Vacations
Least Privilege
Separation of Duties
Job Rotation
59
A tool to help track requirements of security and the System Development Lifecycle is:
SAN
ERM
SRTM
SLA
