Chapter 1 Designing Secure ArchitectureCASP Mark B

Question 1

Which is the security module that would store an e-commerce servers private key?

A. DLP
B. HSM
C. DPI
D. 802.1x

Answer 1

B. HSM

Question 2

How can I mitigate the threat of data leakage?

A. Through DLP
B. Through HSM
C. Through DPI
D. Through 802.1x

Answer 2

A. Through DLP

Question 3

What type of IDS would I be using if I needed to update my definition files?

A. Anomaly
B. Behavior
C. Heuristics
D. Signature

Answer 3

D. Signature

Question 4

What is the purpose of iptables on a host computer?

A. Routing
B. Firewall
C. Switching
D. Encryption

Answer 4

B. Firewall

Question 5

Which protocol would be used to manage a router securely from a technicians laptop?

A. Telnet
B. RDP
C. SSH
D. FTP

Answer 5

C. SSH

Explanation:

Question 6

How should I protect my management interface on a switch when I need to configure it remotely?

A. OSPF
B. OOB Management
C. Strong Password
D. RIP v2

Answer 6

B. OOB Management
C. Strong Password

Question 7

What is an Ethernet standard for port access protocol, used for protecting networks via authentication?

A. 802.11
B. 802.3
C. 802.1x
D. 802.5

Answer 7

C. 802.1x

Question 8

What type of connectivity will allow key personnel to maintain communication with one another and key network resources when the main network is under attack?

A. Email
B. OOB
C. Teams
D. VNC

Answer 8

B. OOB

Question 9

What is a disadvantage when using a virtual desktop infrastructure (VDI)?

A. Reliance on networks
B. Better use of hardware resources
C. Enhanced security
D. Standard operating environment (SOE)

Answer 9

A. Reliance on networks

Question 10

What is used when my contractors use a tablet or thin client to access a Windows 10 desktop in my data center?

A. OOB
B. MDM
C. VDI
D. SSH

Answer 10

C. VDI

Question 11

What type of routing will help to mitigate a DDoS attack?
A. OSPF
B.RTBH
C. RIP
D. EIGRP

Answer 11

B.RTBH

Question 12

What is it when SOC staff are failing to respond to alerts due to excessive levels of alerts?

A. False positive
B. Alert fatigue
C. False negative
D. True positive

Answer 12

B. Alert fatigue

Explanation:

Question 13

What will I need to support on my network device in order to forward truncated network traffic to a network monitoring tool?

A. Netflow
B. sFlow
C. SIEM
D. System Logging Protocol (Syslog)

Answer 13

B. sFlow

Question 14

What type of security would I use on my layer 2 switch to isolate the finance network from the development network?

A. VPN
B. IPSec
C. VLAN
D. RTBH

Answer 14

C. VLAN

Explanation:

Question 15

What type of servers would the security team place on the DMZ network?

A. Web Application Server
B. SMTP Gateway
C. Intranet File Server
D. Finance Department Payroll Server

Answer 15

A. Web Application Server
B. SMTP Gateway

Question 16

What type of security label would CISA assign to the chemical sector and communications sector?

A. Regulated industry
B. Protected Infrastructure
C. SCADA
D. Critical Infrastructure

Answer 16

D. Critical Infrastructure

Question 17

What will protect my WiFi network against common threats, including evil twin/rogue APs and DDoS?

A. 802.1x
B. Host based IPS (HIPS)
C. Firewall
D. WIPS

Answer 17

D. WIPS

Question 18

What should I configure on mobile users’ laptop computers to ensure they will not be vulnerable to sniffing/eavesdropping when accessing the hostels WiFi network?

A. Antimalware
B. Shielding
C. Cable locks
D. VPN

Answer 18

D. VPN

Explanation:

Question 19

Which edge security appliance should be recommended for an organization that has no dedicated security team and needs multiple security protection functions?

A. Router
B. WAF
C. UTM
D. DLP

Answer 19

C. UTM

Question 20

What should be used to connect to a remote government agency across public networks?

A. VPN
B. HAIPE
C. VLAN
D. Protected distribution

Answer 20

B. HAIPE (High Assurance Internet Protocol Encryptor)