QUESTION: 89

A network engineer is attempting to design-in resiliency characteristics for an enterprise network’s VPN services.

If the engineer wants to help ensure some resilience against zero-day vulnerabilities exploited against the VPN implementation, which of the following decisions would BEST support this objective?

Implement a reverse proxy for VPN traffic that is defended and monitored by the organization’s SOC with near-real-time alerting to administrators.
Subscribe to a managed service provider capable of supporting the mitigation of advanced DDoS attacks on the enterprise’s pool of VPN concentrators.
Distribute the VPN concentrators across multiple systems at different physical sites to ensure some backup services are available in the event of primary site loss.
Employ a second VPN layer concurrently where the other layer’s cryptographic implementation is sourced from a different vendor.

Answer(s): D

Reveal Solution Next Question

QUESTION: 90

An information security officer is responsible for one secure network and one office network. Recent intelligence suggests there is an opportunity for attackers to gain access to the secure network due to similar login credentials across networks. To determine the users who should change their information, the information security officer uses a tool to scan a file with hashed values on both networks and receives the following data:

Which of the following tools was used to gather this information from the hashed values in the file?

Vulnerability scanner
Fuzzer
MD5 generator
Password cracker
Protocol analyzer

Answer(s): D

Reveal Solution Next Question

QUESTION: 91

A Chief Information Security Officer (CISO is reviewing and revising system configuration and hardening guides that were developed internally and have been used several years to secure the organization’s systems. The CISO knows improvements can be made to the guides.

Which of the following would be the BEST source of reference during the revision process?

CVE database
Internal security assessment reports
Industry-accepted standards
External vulnerability scan reports
Vendor-specific implementation guides

Answer(s): A

Reveal Solution Next Question

QUESTION: 92

A systems administrator recently joined an organization and has been asked to perform a security assessment of controls on the organization’s file servers, which contain client data from a number of sensitive systems. The administrator needs to compare documented access requirements to the access implemented within the file system.

Which of the following is MOST likely to be reviewed during the assessment? (Choose two.)

Access control list
Security requirements traceability matrix
Data owner matrix
Roles matrix
Data design document
Data access policies

Answer(s): A,F

Reveal Solution Next Question

Free CAS-003 Exam Braindumps (page: 23)

QUESTION: 89

QUESTION: 90

QUESTION: 91

QUESTION: 92