QUESTION: 161

A company invested a total of $10 million for a new storage solution installed across five on-site datacenters. Fifty percent of the cost of this investment was for solid-state storage. Due to the high rate of wear on this storage, the company is estimating that 5% will need to be replaced per year.
Which of the following is the
ALE due to storage replacement?

$50,000
$125,000
$250,000
$500,000
$1,000,000

Answer(s): C

Reveal Solution Next Question

QUESTION: 162

A security architect was asked to modify an existing internal network design to accommodate the following requirements for RDP:
-Enforce MFA for RDP.
-Ensure RDP connections are only allowed with secure ciphers.
The existing network is extremely complex and not well segmented. Because of these limitations, the company has requested that the connections not be restricted by network-level firewalls or ACLs.
Which of the following should the security architect recommend to meet these requirements?

Implement a reverse proxy for remote desktop with a secure cipher configuration enforced.
Implement a bastion host with a secure cipher configuration enforced.
Implement a remote desktop gateway server, enforce secure ciphers, and configure to use OTP.
Implement a GPO that enforces TLS cipher suites and limits remote desktop access to only VPN users.

Answer(s): C

Reveal Solution Next Question

QUESTION: 163

An organization is deploying a new, online digital bank and needs to ensure availability and performance. The cloud-based architecture is deployed using PaaS and SaaS solutions, and it was designed with the following considerations:
-Protection from DoS attacks against its infrastructure and web applications is in place.
-Highly available and distributed DNS is implemented.
-Static content is cached in the CDN.
-A WAF is deployed inline and is in block mode.
-Multiple public clouds are utilized in an active-passive architecture.
With the above controls in place, the bank is experiencing a slowdown on the unauthenticated payments page.
Which of the following is the MOST likely cause?

The public cloud provider is applying QoS to the inbound customer traffic.
The API gateway endpoints are being directly targeted.
The site is experiencing a brute-force credential attack.
A DDoS attack is targeted at the CDN.

Answer(s): B

Reveal Solution Next Question

QUESTION: 164

A healthcare system recently suffered from a ransomware incident. As a result, the board of directors decided to hire a security consultant to improve existing network security. The security consultant found that the healthcare network was completely flat, had no privileged access limits, and had open RDP access to servers with personal health information. As the consultant builds the remediation plan, which of the following solutions would BEST solve these challenges?
(Choose three.)

SD-WAN
PAM
Remote access VPN
MFA
Network segmentation
BGP
NAC

Answer(s): B,C,E

Reveal Solution Next Question

Free CAS-004 Exam Braindumps (page: 41)

QUESTION: 161

QUESTION: 162

QUESTION: 163

QUESTION: 164