CASP Exam A Questions with 100% Correct Answers

Which characteristic of PGP is different from the use of formal trust certificates? Correct Answer The establishment of a web of trust between the users Your organization has implemented a PKI for issuing certificates. Your organization issued several certificates to a partner organization. You revoked the certificates today. Management is concerned that the revocation request grace period will prevent the certificates from being revoked in a timely manner. Correct Answer It relates to the maximum response time taken by the CA for a revocation Your organization has implemented a PKI. You need to ensure that each user's browser automatically checks the status of the user's certificate. What should you implement? Correct Answer OCSPn Your organization has implemented a VPN that allows branch offices to connect to the main office. You have discovered that the key used on the VPN has been compromised. You need to ensure that the key is not compromised in the future. Correct Answer Enable PFS on the main office and branch offices' ends of the VPN Your organization has decided to implement a VPN so that remote employees can connect to the internal network. You decide to implement the VPN using L2TP over IPSec. Which statements are true of IPSec? Correct Answer IPSec can work in either tunnel or transport mode nnIPSec uses encapsulation security payload (ESP) & authentication headers (AH) as security protocols for encapsulationnnIPSec framework is used in a VPN implementation to secure transmissions Your organization needs to use a pseudo-random number generator (PRNG). You need to decide on which PRNG to use. What should your primary security consideration be? Correct Answer The entropy of the PRNG All of the following are security risks associated with cloud computing except Correct Answer False positives Your organization uses an Ethernet LAN and multiple database servers. The databases are heavily used and reside on multiple SCSI RAID devices attached to servers. To keep pace with competitive trends, your organization is considering the use of iSCSI. Which statement will correctly apply to your LAN if iSCSI is implemented? Correct Answer The use of iSCSI will allow SCSI commands to flow over Ethernet Which two statements comparing a SAN and a NAS are correct? Correct Answer NAS is easier to install than a SANnnNAS typically uses either proprietary or trimmed-down version of an operating system to reduce user licensing costs