CompTIA Advanced Security Practitioner (CASP) Tests Bundle

You are the security administrator for your company. You are required to implement a solution that will provide the highest level of confidentiality possible to all data on the network. Two-factor token and biometric-based authentication is implemented for all users. Administrator-level accounts ...

Encapsulating Security Payload (ESP) - Answer An IPsec sub-protocol that enables encryption and authentication of the header and payload of a data packet 2FA (two-factor authentication) - Answer can be used to help protect your account from unauthorized access by requiring you to enter an add...

802.1x - Answer An IEEE standard used to provide a port-based authentication mechanism over a LAN or wireless LAN. After Action Report - Answer A post-incident report that include lessons learned to improve security for the future. Accountability - Answer In security terms, the process o...

A company with 2000 workstations is considering purchasing a HIPS to minimize the impact of a system compromise from malware. Currently, the company projects a total cost of $50,000 for the next three years responding to and eradicating workstation malware. The Information Security Officer (ISO) has...

Trusted Operating System - Answer provides support for multilevel security and evidence of correctness to meet a particular set of government requirements Trusted Computer System Evaluation Criteria (TCSEC) - Answer - standards for the DoD to evaluate products - Orange Book a collection of c...

The Chief Information Security Office (CISO) informs the team that since the organization will sign a NDA with any potential suppliers, the most current industry evaluation should include details of tests performed by the supplier's auditors and the associated results. Based on the requirements pro...

There have been some failures of the company's internal facing website. A security engineer has found the WAF to be the root cause of the failures. System logs show that the WAF has been unavailable for 14 hours over the past month, in four separate situations. One of these situations was a two hou...

The Chief Information Officer (CIO) is reviewing the IT centric BIA and RA documentation. The documentation shows that a single 24 hours downtime in a critical business function will cost the business $2.3 million. Additionally, the business unit which depends on the critical business function has d...

Key Stretching - Answer Makes a weak key stronger by increasing the time it takes to test each possible key. The original key is fed to an algorithm to produce an enhanced key, which should be at least 128 bits. Systems that use key stretching - Answer Pretty Good Privacy (PGP), GNU Privacy G...

3DES - Answer Triple Digital Encryption Standard AAA - Answer Authentication, Authorization and Accounting AAR - Answer After Action Report ACL - Answer Access Control List AD - Answer Active Directory AES - Answer Advanced Encryption Standard AH - Answer Authenticati...

An infrastructure team is at the end of a procurement process and has selected a vendor. As part of the final negotiations, there are a number of outstanding issues, including: 1. Indemnity clauses have identified the maximum liability 2. The data will be hosted and managed outside of the company...

A security engineer on a large enterprise network needs to schedule maintenance within a fixed window of time. A total outage period of four hours is permitted for servers. Workstations can undergo maintenance from 8:00 pm to 6:00 am daily. Which of the following can specify parameters for the maint...

Large multinational organization wants to improve elasticity and resource usage of hardware that is housing on-premise critical internal services - Answer Private cloud with IaaS Collection of organizations in th esame industry vertical developing services based on a common application stack - ...

A flaw in an online sporting goods website allows customers to purchase multiple quantities of goods and only be charged the single quantity price. To improve the site, management is demanding that the ecommerce application be tested to insure this flaw is corrected. Which of the following is the BE...