CompTIA RC0-C02 問題集

質問 1：
In an effort to reduce internal email administration costs, a company is determining whether to outsource its email to a managed service provider that provides email, spam, and malware protection. The security manager is asked to provide input regarding any security implications of this change. Which of the following BEST addresses risks associated with disclosure of intellectual property?
A. Establish an acceptable use policy and incident response policy.
B. Enable data loss protection to minimize emailing PII and confidential data.
C. Require the managed service provider to implement additional data separation.
D. Require encrypted communications when accessing email.
正解：B

質問 2：
An organization has implemented an Agile development process for front end web application development. A new security architect has just joined the company and wants to integrate security activities into the SDLC.
Which of the following activities MUST be mandated to ensure code quality from a security perspective?
(Select TWO).
A. Static and dynamic analysis is run as part of integration
B. Security requirements are story boarded and make it into the build
C. Daily stand-up meetings are held to ensure security requirements are understood
D. Security standards and training is performed as part of the project
E. A security design is performed at the end of the requirements phase
F. For each major iteration penetration testing is performed
正解：A,F
解説: (Topexam メンバーにのみ表示されます)

質問 3：
A company that must comply with regulations is searching for a laptop encryption product to use for its
4 0,000 end points. The product must meet regulations but also be flexible enough to minimize overhead and support in regards to password resets and lockouts. Which of the following implementations would
BEST meet the needs?
A. A full-disk hardware-based encryption product with a low-level boot protection and authentication
B. A container-based encryption product that allows the end users to select which files to encrypt
C. A partition-based software encryption product with a low-level boot protection and authentication
D. A file-based encryption product using profiles to target areas on the file system to encrypt
正解：D
解説: (Topexam メンバーにのみ表示されます)

質問 4：
A security analyst has been asked to develop a quantitative risk analysis and risk assessment for the company's online shopping application. Based on heuristic information from the Security Operations
Center (SOC), a Denial of Service Attack (DoS) has been successfully executed 5 times a year. The
Business Operations department has determined the loss associated to each attack is $40,000. After implementing application caching, the number of DoS attacks was reduced to one time a year. The cost of the countermeasures was $100,000. Which of the following is the monetary value earned during the first year of operation?
A. $60,000
B. $200,000
C. $100,000
D. $140,000
正解：A
解説: (Topexam メンバーにのみ表示されます)

質問 5：
A new piece of ransomware got installed on a company's backup server which encrypted the hard drives containing the OS and backup application configuration but did not affect the deduplication data hard drives. During the incident response, the company finds that all backup tapes for this server are also corrupt. Which of the following is the PRIMARY concern?
A. Validating the integrity of the deduplicated data
B. Restoring the data will be difficult without the application configuration
C. Determining how to install HIPS across all server platforms to prevent future incidents
D. Preventing the ransomware from re-infecting the server upon restore
正解：B
解説: (Topexam メンバーにのみ表示されます)

質問 6：
An IT manager is concerned about the cost of implementing a web filtering solution in an effort to mitigate the risks associated with malware and resulting data leakage. Given that the ARO is twice per year, the
ALE resulting from a data leak is $25,000 and the ALE after implementing the web filter is $15,000. The web filtering solution will cost the organization $10,000 per year. Which of the following values is the single loss expectancy of a data leakage event after implementing the web filtering solution?
A. $12,500
B. $10,000
C. $15,000
D. $0
E. $7,500
正解：E
解説: (Topexam メンバーにのみ表示されます)