Online Access Free CAS-002 Practice Test

A company has implemented data retention policies and storage quotas in response to their legal department's requests and the SAN administrator's recommendation. The retention policy states all email data older than 90 days should be eliminated. As there are no technical controls in place, users have been instructed to stick to a storage quota of
500Mb of network storage and 200Mb of email storage. After being presented with an e- discovery request from an opposing legal council, the security administrator discovers that the user in the suit has 1Tb of files and 300Mb of email spanning over two years. Which of the following should the security administrator provide to opposing council?

• A.Delete files and email exceeding policy thresholds and turn over the remaining files and email.
• B.Provide the 1Tb of files on the network and the 300Mb of email files regardless of age.
• C.Provide the first 200Mb of e-mail and the first 500Mb of files as per policy.
• D.Delete email over the policy threshold and hand over the remaining emails and all of the files.

An international shipping company discovered that deliveries left idle are being tampered with. The company wants to reduce the idle time associated with international deliveries by ensuring that personnel are automatically notified when an inbound delivery arrives at the transit dock. Which of the following should be implemented to help the company increase the security posture of its operations?

• A.Asset tracking
• B.Geo-fencing
• C.Back office database
• D.Barcode scanner

The Information Security Officer (ISO) is reviewing a summary of the findings from the last COOP tabletop exercise. The Chief Information Officer (CIO) wants to determine which additional controls must be implemented to reduce the risk of an extended customer service outage due to the VoIP system being unavailable. Which of the following BEST describes the scenario presented and the document the ISO is reviewing?

• A.The ISO is investigating the impact of a possible downtime of the messaging system within the RA.
• B.The ISO is calculating the budget adjustment needed to ensure audio/video system redundancy within the RFQ.
• C.The ISO is assessing the effect of a simulated downtime involving the telecommunication system within the AAR.
• D.The ISO is evaluating the business implications of a recent telephone system failure within the BIA.

In order for a company to boost profits by implementing cost savings on non-core business activities, the IT manager has sought approval for the corporate email system to be hosted in the cloud. The compliance officer has been tasked with ensuring that data lifecycle issues are taken into account. Which of the following BEST covers the data lifecycle end- to-end?

• A.Data provisioning, processing, in transit, at rest, and de-provisioning
• B.Information classification, vendor selection, and the RFP process
• C.Securing virtual environments, appliances, and equipment that handle email
• D.Creation and secure destruction of mail accounts, emails, and calendar items

Customers are receiving emails containing a link to malicious software. These emails are subverting spam filters. The email reads as follows:
Delivered-To: [email protected]
Received: by 10.14.120.205
Mon, 1 Nov 2010 11:15:24 -0700 (PDT)
Received: by 10.231.31.193
Mon, 01 Nov 2010 11:15:23 -0700 (PDT)
Return-Path: <[email protected]>
Received: from 127.0.0.1 for <[email protected]>; Mon, 1 Nov 2010 13:15:14 -0500 (envelope-from <[email protected]>) Received: by smtpex.example.com (SMTP READY) with ESMTP (AIO); Mon, 01 Nov 2010 13:15:14 -0500 Received: from 172.18.45.122 by 192.168.2.55; Mon, 1 Nov 2010 13:15:14 -0500 From: Company <[email protected]> To: "[email protected]" <[email protected]> Date: Mon, 1 Nov 2010 13:15:11 -0500 Subject: New Insurance Application Thread-Topic: New Insurance Application Please download and install software from the site below to maintain full access to your account.
www.examplesite.com
________________________________
Additional information: The authorized mail servers IPs are 192.168.2.10 and 192.168.2.11.
The network's subnet is 192.168.2.0/25.
Which of the following are the MOST appropriate courses of action a security administrator could take to eliminate this risk? (Select TWO).

• A.Shut down the SMTP service on the unauthorized mail server.
• B.Block port 25 on the firewall for all unauthorized mail servers.
• C.Enable STARTTLS on the spam filter.
• D.Identify the origination point for malicious activity on the unauthorized mail server.
• E.Disable open relay functionality.