CompTIA RC0-C02 Online Practice Questions and Exam Preparation

CompTIA RC0-C02 Online Questions & Answers

• Question 151:

  An administrator is implementing a new network-based storage device. In selecting a storage protocol, the administrator would like the data in transit's integrity to be the most important concern. Which of the following protocols meets these needs by implementing either AES-CMAC or HMAC-SHA256 to sign data?

  A. SMB
  B. NFS
  C. FCoE
  D. iSCSI
  A. SMB

  ---

  Server Message Block (SMB) is a protocol that has long been used by Windows computers for sharing files, printers and other resources among computers on the network. The server message blocks are the requests that an SMB client

  sends to a server and the responses that the server sends back to the client.

  Microsoft has improved the SMB protocol over the years. In 2006, they came out with a new version, SMB 2.0, in conjunction with Vista, and SMB 2.1 with Windows 7. Version 2 was a major revision with significant changes, including a

  completely different packet format. Windows 8 introduces another new version, SMB 3.0. Microsoft has made a number of security improvements in SMB 3.0, which will be introduced in the Windows 8 client and Windows Server 2012. A new

  algorithm is used for SMB signing. SMB 2.x uses HMAC-SHA256. SMB 3.0 uses AES-CMAC. CMAC is based on a symmetric key block cipher (AES), whereas HMAC is based on a hash function (SHA). AES (Advanced Encryption Standard)

  is the specification adopted by the U.S. government in 2002 and was approved by the National Security Agency (NSA) for encryption of top secret information.

• Question 152:

  Which of the following activities could reduce the security benefits of mandatory vacations?

  A. Have a replacement employee run the same applications as the vacationing employee.
  B. Have a replacement employee perform tasks in a different order from the vacationing employee.
  C. Have a replacement employee perform the job from a different workstation than the vacationing employee.
  D. Have a replacement employee run several daily scripts developed by the vacationing employee.
  D. Have a replacement employee run several daily scripts developed by the vacationing employee.

• Question 153:

  The Chief Executive Officer (CEO) of a small start-up company wants to set up offices around the country for the sales staff to generate business. The company needs an effective communication solution to remain in constant contact with each other, while maintaining a secure business environment. A junior-level administrator suggests that the company and the sales staff stay connected via free social media. Which of the following decisions is BEST for the CEO to make?

  A. Social media is an effective solution because it is easily adaptable to new situations.
  B. Social media is an ineffective solution because the policy may not align with the business.
  C. Social media is an effective solution because it implements SSL encryption.
  D. Social media is an ineffective solution because it is not primarily intended for business applications.
  B. Social media is an ineffective solution because the policy may not align with the business.

  ---

  Social media networks are designed to draw people's attention quickly and to connect people is thus the main focus; security is not the main concern. Thus the CEO should decide that it would be ineffective to use social media in the company as it does not align with the company business.

• Question 154:

  An external penetration tester compromised one of the client organization's authentication servers and retrieved the password database. Which of the following methods allows the penetration tester to MOST efficiently use any obtained administrative credentials on the client organization's other systems, without impacting the integrity of any of the systems?

  A. Use the pass the hash technique
  B. Use rainbow tables to crack the passwords
  C. Use the existing access to change the password
  D. Use social engineering to obtain the actual password
  A. Use the pass the hash technique

  ---

  With passing the hash you can grab NTLM credentials and you can manipulate the Windows logon sessions maintained by the LSA component. This will allow you to operate as an administrative user and not impact the integrity of any of the systems when running your tests.

• Question 155:

  An administrator wishes to replace a legacy clinical software product as it has become a security risk. The legacy product generates $10,000 in revenue a month. The new software product has an initial cost of $180,000 and a yearly maintenance of $2,000 after the first year. However, it will generate $15,000 in revenue per month and be more secure. How many years until there is a return on investment for this new package?

  A. 1
  B. 2
  C. 3
  D. 4
  D. 4

  ---

  Return on investment = Net profit / Investment where: Profit for the first year is $60 000, second year = $ 120 000 ; third year = $ 180 000 ; and fourth year = $ 240 000 investment in first year = $ 180 000, by year 2 = $ 182 000; by year 3 = $ 184 000 ; and by year 4 = $ 186 000 Thus you will only get a return on the investment in 4 years' time.

  References: http://www.financeformulas.net/Return_on_Investment.html

• Question 156:

  An IT manager is working with a project manager to implement a new ERP system capable of transacting data between the new ERP system and the legacy system. As part of this process, both parties must agree to the controls utilized to secure data connections between the two enterprise systems. This is commonly documented in which of the following formal documents?

  A. Memorandum of Understanding
  B. Information System Security Agreement
  C. Interconnection Security Agreement
  D. Interoperability Agreement
  E. Operating Level Agreement
  C. Interconnection Security Agreement

  ---

  An interconnection security agreement (ISA) is a security document that derails the requirements for establishing, maintaining, and operating an interconnection between systems or networks. It specifies the requirements for connecting the systems and networks and details what security controls are co be used to protect the systems and sensitive data.

• Question 157:

  The helpdesk manager wants to find a solution that will enable the helpdesk staff to better serve company employees who call with computer-related problems. The helpdesk staff is currently unable to perform effective troubleshooting and relies on callers to describe their technology problems. Given that the helpdesk staff is located within the company headquarters and 90% of the callers are telecommuters, which of the following tools should the helpdesk manager use to make the staff more effective at troubleshooting while at the same time reducing company costs? (Select TWO).

  A. Web cameras
  B. Email
  C. Instant messaging
  D. BYOD
  E. Desktop sharing
  F. Presence
  C. Instant messaging
  E. Desktop sharing

  ---

  C: Instant messaging (IM) allows two-way communication in near real time, allowing users to collaborate, hold informal chat meetings, and share files and information. Some IM platforms have added encryption, central logging, and user access controls. This can be used to replace calls between the end-user and the helpdesk.

  E: Desktop sharing allows a remote user access to another user's desktop and has the ability to function as a remote system administration tool. This can allow the helpdesk to determine the cause of the problem on the end-users desktop.

• Question 158:

  The Linux server at Company A hosts a graphical application widely used by the company designers. One designer regularly connects to the server from a Mac laptop in the designer's office down the hall. When the security engineer learns of this it is discovered the connection is not secured and the password can easily be obtained via network sniffing. Which of the following would the security engineer MOST likely implement to secure this connection?

  Linux Server: 192.168.10.10/24

  Mac Laptop: 192.168.10.200/24

  A. From the server, establish an SSH tunnel to the Mac and VPN to 192.168.10.200.
  B. From the Mac, establish a remote desktop connection to 192.168.10.10 using Network Layer Authentication and the CredSSP security provider.
  C. From the Mac, establish a VPN to the Linux server and connect the VNC to 127.0.0.1.
  D. From the Mac, establish a SSH tunnel to the Linux server and connect the VNC to 127.0.0.1.
  D. From the Mac, establish a SSH tunnel to the Linux server and connect the VNC to 127.0.0.1.

• Question 159:

  A Chief Information Security Officer (CISO) has requested that a SIEM solution be implemented. The CISO wants to know upfront what the projected TCO would be before looking further into this concern. Two vendor proposals have been

  received:

  Vendor A: product-based solution which can be purchased by the pharmaceutical company.

  Capital expenses to cover central log collectors, correlators, storage and management consoles expected to be $150,000. Operational expenses are expected to be a 0.5 full time employee (FTE) to manage the solution, and 1 full time

  employee to respond to incidents per year.

  Vendor B: managed service-based solution which can be the outsourcer for the pharmaceutical company's needs.

  Bundled offering expected to be $100,000 per year.

  Operational expenses for the pharmaceutical company to partner with the vendor are expected to be a 0.5 FTE per year.

  Internal employee costs are averaged to be $80,000 per year per FTE. Based on calculating TCO of the two vendor proposals over a 5 year period, which of the following options is MOST accurate?

  A. Based on cost alone, having an outsourced solution appears cheaper.
  B. Based on cost alone, having an outsourced solution appears to be more expensive.
  C. Based on cost alone, both outsourced an in-sourced solutions appear to be the same.
  D. Based on cost alone, having a purchased product solution appears cheaper.
  A. Based on cost alone, having an outsourced solution appears cheaper.

  ---

  The costs of making use of an outsources solution will actually be a savings for the company thus the outsourced solution is a cheaper option over a 5 year period because it amounts to 0,5 FTE per year for the company and at present the

  company expense if $80,000 per year per FTE.

  For the company to go alone it will cost $80,000 per annum per FTE = $400,000 over 5 years.

  With Vendor a $150,000 + $200,000 (?FTE) = $350,000 With Vendor B = $100,000 it will be more expensive.

  References:

  Gregg, Michael, and Billy Haines, CASP CompTIA Advanced Security Practitioner Study Guide, John Wiley and Sons, Indianapolis, 2012, p. 130

• Question 160:

  A system worth $100,000 has an exposure factor of eight percent and an ARO of four. Which of the following figures is the system's SLE?

  A. $2,000
  B. $8,000
  C. $12,000
  D. $32,000
  B. $8,000

  ---

  Single Loss Expectancy (SLE) is mathematically expressed as: Asset value (AV) x Exposure Factor (EF) SLE = AV x EF = $100 000 x 8% = $ 8 000

  References:

  http://www.financeformulas.net/Return_on_Investment.html https://en.wikipedia.org/wiki/Risk_assessment