stud
bud
Sign up
Log in
Home
Library
Explore
SAT
More
CASP Flashcards | StudBud
Explore
/
CASP
CASP
32 terms
·
StudBud Administration
·
168 plays
Check out your Skills in the First 2 Chapters Of CASP!
Flashcards
32 cards
F
Practice quiz
P
Host live
L
Questions
32
Answers
1
Which best practice would most effectively detect employee violations of security policy?
Job Rotation
Mandatory Vacations
SoD
Least Privilege
2
Which of the following should be used to identify overflow vulnerabilities?
Input Validation
Privilege Escalation
Fuzzing
Secure Code Standards
3
According to CASP, which class of information has the most impact of a business of compromised?
Restricted
Confidential
Private
Public
4
which protocol provides authentication but sends the credentials in cleartext & can be sniffed?
CHAPv2
PAP
CHAP
EAP
5
How an organization will continue normal operations in the event of a disruption is part of:
CAB
BCP
BIA
PIR
6
Which of the following is an advantage of single sign-on?
All transactions are highly encrypted.
Users only have to remember one password.
Applications need to validate authentication tokens.
Authentication is secured by the certificate authority
7
Logs over the past few months show you have been under a password attack. what attack is this?
Cllient-Side Attack
Solical Engineering
Zero-Day attack
Advanced Persistent Threat
8
Overall, what is the primary concern when it comes to PII?
Integrity
Confidentiality
Availability
Authentication
9
A tool to help track requirements of security and the System Development Lifecycle is:
SLA
SRTM
SAN
ERM
10
Of the following, which does not describe a SAN?
Relatively low investment
Maintenance can be done without taking the servers offline.
Easily scalable with additional storage
Sharing is made easier
11
Which policy would help to allow co-workers to audit another worker's position?
Job Rotation
Least Privilege
Separation of Duties
Manditory Vacations
12
Making storage available to some hosts and unavailable to other hosts is done by using what?
Deduplication
Snapshots
LUN masking
Multipathing
13
Which of the CIA requirements is BEST met by multipathing for a SAN?
Integrity
Confidentiality
Authentication
Availability
14
Virtual hosts with different security requirements should be:
moved to the cloud.
stored on separate physical hosts.
encrypted with a one-time password
scanned for vulnerabilities regularly.
15
Which of the following authentication types is used primarily to authenticate using of tickets?
RADIUS
TACACS+
Kerberos
LDAP
16
A.K.A. Kennedy Kassebaum Act, this law affects how heathcare data is transmitted and handled
CFAA
SOX
GLBA
HIPAA
17
Of the following cloud approaches, which gives the maximum amount of control over the data?
Private
Hybrid
Composite
Public
18
Which port does SFTP use?
TCP 80
TCP 22
TCP 110
TCP 25
19
An IDS is generating a large number of irrelevant events. Which would BEST remedy this problem?
Change the IDS to use a heuristic anomaly filter
Change the IDS filter to data mine statistical trending data
Adjust IDS filters to increase the number of false negatives
Adjust IDS filters to decrease the number of false positives
20
A small storage device connected to the LAN that acts similar to a file server is known as?
Cloud Storage
SAN
Virtual Storage
NAS
21
The software development method that is the most rigid and must procede in order is:
ITIL
Waterfall
Spiral
Agile
22
A third party sends a doc. outlining availability, bandwidth and support guarantees. What doc?
SLA
OLA
ISA
MOU
23
Mandatory training instructing users the proper use of cloud storage is what risk strategy?
Transfer
Mitigate
Accept
Avoid
24
A company is looking to purchase a smaller company. What task should security perform first?
Review the firewall rule set and IPS logs
Review switch and router configurations
Perform a network penetration test
Review the security policies and standards
25
Which of the following is the MOST appropriate control measure for lost mobile devices?
Require that the compromised devices be remotely wiped.
Disable unnecessary wireless interfaces such as Bluetooth.
Reduce the amount of sensitive data stored on the device
Require authentication before access is given to the device.
26
Of the following; which one defines the acceptable risk level and reduces risk to that level?
Mitigate
Avoid
Transfer
Accept
27
An application on 1,000 systems is open to a buffer overflow. Which is the best way to resolve?
Deploy custom HIPS signatures to detect and block
Deploy custom NIPS signatures to detect and block.
Run the app. in terminal services to reduce the threat.
Validate and deploy the appropriate patch
28
Of the following, which is an attack for obtaining access to perform a MiTM attack?
Smurf Attack
ARP poisoning
MAC Address overflow
Bluejacking
29
Which of the following is a way to stay current on exploits and information security news?
Run vulnerability management tests
Subscribe to security mailing lists
Update company policies and procedures
Implement security awareness training
30
Which of the following describes a risk and mitigation associated with cloud data storage?
R: Shared hardware caused data leakage M: encryption at rest
R: Combined data archiving M: Two-factor authentication
R: Offsite replication M: Multi-site backups
R: Data loss from de-duplication M: Dynamic host bus address
31
Of the following, which chip makes full disk encryption possible?
Sealed
TPM
Out-Of-Band
Clipper
32
Of the following, which is the biggest concern for security personnel?
Website Vulnerabilities
Insider Threats
State Sponsored Hackers
Ransomware
