A small retail company recently deployed a new point of sale (POS) system to all 67 stores. The core of the POS is an extra net site, accessible only from retail stores and the corporate office over a split tunnel
VPN. An additional split-tunnel VPN provides bi-directional connectivity back to the main office, which provides voice connectivity for store VoIP phones. Each store offers guest wireless functionality, as well as employee wireless. Only the staff wireless network has access to the POS VPN.
Recently, stores are reporting poor response times when accessing the POS application from store computers as well as degraded voice quality when making phone calls. Upon investigation, it is determined that three store PCs are hosting malware, which is generating excessive network traffic.
After malware removal, the information security department is asked to review the configuration and suggest changes to prevent this from happening again. Which of the following denotes the BEST way to mitigate future malware risk?
A. Move to a VDI solution that runs offsite from the same data center that hosts the new POS solution.
B. Deploy a proxy server with content filtering at the corporate office and route all traffic through it.
C. Change antivirus vendors at the store and the corporate office.
D. Deploy new perimeter firewalls at all stores with UTM functionality.
正解:D
解説: (Pass4Test メンバーにのみ表示されます)
質問 2:
A corporation has Research and Development (R&D) and IT support teams, each requiring separate networks with independent control of their security boundaries to support department objectives.
The corporation's Information Security Officer (ISO) is responsible for providing firewall services to both departments, but does not want to increase the hardware footprint within the datacenter.
Which of the following should the ISO consider to provide the independent functionality required by each department's IT teams?
A. Put both departments behind the firewall and incorporate restrictive controls on each department's network.
B. Provide each department with a virtual firewall and assign administrative control to the physical firewall.
C. Put both departments behind the firewall and assign administrative control for each department to the corporate firewall.
D. Provide each department with a virtual firewall and assign appropriate levels of management for the virtual device.
正解:D
質問 3:
A software development manager is taking over an existing software development project. The team currently suffers from poor communication due to a long delay between requirements documentation and feature delivery. This gap is resulting in an above average number of security related bugs making it into production. Which of the following development methodologies is the team MOST likely using now?
A. Waterfall
B. Agile
C. Scrum
D. Spiral
正解:A
解説: (Pass4Test メンバーにのみ表示されます)
質問 4:
An information security assessor for an organization finished an assessment that identified critical issues with the human resource new employee management software application. The assessor submitted the report to senior management but nothing has happened. Which of the following would be a logical next step?
A. Schedule a meeting with key human resource application stakeholders.
B. Craft an RFP to begin finding a new human resource application.
C. Include specific case studies from other organizations in an updated report.
D. Meet the two key VPs and request a signature on the original assessment.
正解:A
解説: (Pass4Test メンバーにのみ表示されます)
質問 5:
A system worth $100,000 has an exposure factor of eight percent and an ARO of four. Which of the following figures is the system's SLE?
A. $12,000
B. $8,000
C. $32,000
D. $2,000
正解:B
解説: (Pass4Test メンバーにのみ表示されます)
1039 お客様のコメント





源氏** -
簡単にまとめると、参考書読む、過去問解く。Pass4TestのRC0-C02問題集を頼りにするだけで試験に合格することができました。感謝カンゲキ雨嵐です。