Online Access Free RC0-C02 Practice Test

Company XYZ finds itself using more cloud-based business tools, and password management is becoming onerous. Security is important to the company; as a result, password replication and shared accounts are not acceptable. Which of the following implementations addresses the distributed login with centralized authentication and has wide compatibility among Saas vendors?

• A.Install a read-only Active Directory server in the corporate DMZ for federation.
• B.Implement a new Diameter authentication server with read-only attestation.
• C.Allow external connections to the existing corporate RADIUS server.
• D.Establish a cloud-based authentication service that supports SAML.

A finance manager says that the company needs to ensure that the new system can "replay" data, up to the minute, for every exchange being tracked by the investment departments. The finance manager also states that the company's transactions need to be tracked against this data for a period of five years for compliance. How would a security engineer BEST interpret the finance manager's needs?

• A.System requirements
• B.Compliance standards
• C.Acceptance testing
• D.Data storage
• E.User requirements
• F.Data elements
• G.Information digest

A systems administrator establishes a CIFS share on a UNIX device to share data to Windows systems.
The security authentication on the Windows domain is set to the highest level. Windows users are stating that they cannot authenticate to the UNIX share. Which of the following settings on the UNIX server would correct this problem?

• A.Refuse NTLMv2 and accept LM
• B.Accept only NTLM
• C.Refuse LM and only accept NTLMv2
• D.Accept only LM

A system administrator has just installed a new Linux distribution. The distribution is configured to be
"secure out of the box". The system administrator cannot make updates to certain system files and services. Each time changes are attempted, they are denied and a system error is generated. Which of the following troubleshooting steps should the security administrator suggest?

• A.Perform all administrative actions while logged in as root
• B.Review settings in the SE Linux configuration files
• C.Disable any firewall software before making changes
• D.Reset root permissions on system files

Which of the following is true about an unauthenticated SAMLv2 transaction?

• A.The browser asks the ldP to validate the user. The ldP sends an XHTML form to the SP and a cookie to the browser. The browser asks for a resource to the SP, which verifies the cookie and XHTML format for access.
• B.The browser asks the SP to validate the user. The SP sends an XHTML form to the ldP. The ldP provides the XHTML form back to the SP, and then the browser asks the SP for a resource.
• C.The browser asks the ldP for a resource. The ldP provides the browser with an XHTML format. The browser asks the SP to validate the user, and then provides the XHTML to the ldP for access.
• D.The browser asks the SP for a resource. The SP provides the browser with an XHTML format. The browser asks the ldP to validate the user, and then provides the XHTML back to the SP for access.