Online Access Free CAS-001 Practice Test

A mature organization with legacy information systems has incorporated numerous new processes and dependencies to manage security as its networks and infrastructure are modernized. The Chief Information Office has become increasingly frustrated with frequent releases, stating that the organization needs everything to work completely, and the vendor should already have those desires built into the software product. The vendor has been in constant communication with personnel and groups within the organization to understand its business process and capture new software requirements from users. Which of the following methods of software development is this organization's configuration management process using?

• A.SDL
• B.Joint application development
• C.Agile
• D.Waterfall

The database team has suggested deploying a SOA based system across the enterprise. The Chief Information Officer (CIO) has decided to consult the security manager about the risk implications for adopting this architecture. Which of the following are concerns that the security manager should present to the CIO concerning the SOA system? (Select TWO).

• A.SOA abstracts legacy systems as web services, which are often exposed to outside threats.
• B.SOA centrally manages legacy systems, and opens the internal network to vulnerabilities.
• C.Users and services are centralized and only available within the enterprise.
• D.SOA abstracts legacy systems as a virtual device and is susceptible to VMEscape.
• E.Users and services are distributed, often times over the Internet

A bank provides single sign on services between its internally hosted applications and externally hosted CRM. The following sequence of events occurs:
1.The banker accesses the CRM system, a redirect is performed back to the organization's internal systems.
2.A lookup is performed of the identity and a token is generated, signed and encrypted.
3.A redirect is performed back to the CRM system with the token.
4.The CRM system validates the integrity of the payload, extracts the identity and performs
a lookup.
5.If the banker is not in the system and automated provisioning request occurs.
6.The banker is authenticated and authorized and can access the system.
This is an example of which of the following?

• A.Service provider initiated SAML 1.1
• B.Service provider initiated SAML 2.0
• C.OpenID federated single sign on
• D.Identity provider initiated SAML 1.0

When Company A and Company B merged, the network security administrator for Company A was tasked with joining the two networks. Which of the following should be done FIRST?

• A.Conduct a penetration test of Company B's network.
• B.Perform a peer code review on Company B's application.
• C.Implement a unified IPv6 addressing scheme on the entire network.
• D.Perform a vulnerability assessment on Company B's network.

A growing corporation is responding to the needs of its employees to access corporate email and other resources while traveling. The company is implementing remote access for company laptops. Which of the following security systems should be implemented for remote access? (Select TWO).

• A.Intrusion detection systems
• B.Virtual Private Network
• C.Multifactor authentication for users
• D.Secure Sockets Layer for web servers
• E.Network monitoring
• F.Full disk encryption