CASP Exam A – Advanced Security Practitioner Study Guide and Exam
Preparation Material
Which characteristic of PGP is different from the use of formal trust certificates? - correct
answer ✔✔The establishment of a web of trust between the users
Your organization has implemented a PKI for issuing certificates. Your organization issued
several certificates to a partner organization. You revoked the certificates today. Management is
concerned that the revocation request grace period will prevent the certificates from being
revoked in a timely manner. - correct answer ✔✔It relates to the maximum response time taken
by the CA for a revocation
Your organization has implemented a PKI. You need to ensure that each user's browser
automatically checks the status of the user's certificate. What should you implement? - correct
answer ✔✔OCSP\n
Your organization has implemented a VPN that allows branch offices to connect to the main
office. You have discovered that the key used on the VPN has been compromised. You need to
ensure that the key is not compromised in the future. - correct answer ✔✔Enable PFS on the
main office and branch offices' ends of the VPN
Your organization has decided to implement a VPN so that remote employees can connect to
the internal network. You decide to implement the VPN using L2TP over IPSec. Which
statements are true of IPSec? - correct answer ✔✔IPSec can work in either tunnel or transport
mode \n\nIPSec uses encapsulation security payload (ESP) & authentication headers (AH) as
security protocols for encapsulation\n\nIPSec framework is used in a VPN implementation to
secure transmissions
Your organization needs to use a pseudo-random number generator (PRNG). You need to decide
on which PRNG to use. What should your primary security consideration be? - correct answer
✔✔The entropy of the PRNG
, All of the following are security risks associated with cloud computing except - correct answer
✔✔False positives
Your organization uses an Ethernet LAN and multiple database servers. The databases are
heavily used and reside on multiple SCSI RAID devices attached to servers. To keep pace with
competitive trends, your organization is considering the use of iSCSI. Which statement will
correctly apply to your LAN if iSCSI is implemented? - correct answer ✔✔The use of iSCSI will
allow SCSI commands to flow over Ethernet
Which two statements comparing a SAN and a NAS are correct? - correct answer ✔✔NAS is
easier to install than a SAN\n\nNAS typically uses either proprietary or trimmed-down version
of an operating system to reduce user licensing costs
Your organization wants to allow employees and partners to remotely access the network. You
must deploy a solution that provides centralized authentication. In addition, you have been
asked to provide accounting and per-command authorization. What should you do? - correct
answer ✔✔Implement a TACACS+ server
Your organization's management has recently spent time discussing attacks against companies
and their infrastructure. During the meeting, the Stuxnet attack was discussed. Against which
type of system did this attack occur? - correct answer ✔✔SCADA
Your company is considering using IPv6 instead of IPv4. Which improvements does IPv6 provide
over IPv4? - correct answer ✔✔Some header fields have been dropped or made optional\n\
nThe IP header options allow more efficient forwarding and less rigid length limits\n
You have been hired as a security consultant for a large organization. During a physical
examination of the 10-story building, you discover several possible security issues. Which
conditions are security concerns? - correct answer ✔✔A glass-enclosed conference room is
located on the tenth floor and contains large screen TVs\n\nEach floor contains a non-locked
wiring closet
Preparation Material
Which characteristic of PGP is different from the use of formal trust certificates? - correct
answer ✔✔The establishment of a web of trust between the users
Your organization has implemented a PKI for issuing certificates. Your organization issued
several certificates to a partner organization. You revoked the certificates today. Management is
concerned that the revocation request grace period will prevent the certificates from being
revoked in a timely manner. - correct answer ✔✔It relates to the maximum response time taken
by the CA for a revocation
Your organization has implemented a PKI. You need to ensure that each user's browser
automatically checks the status of the user's certificate. What should you implement? - correct
answer ✔✔OCSP\n
Your organization has implemented a VPN that allows branch offices to connect to the main
office. You have discovered that the key used on the VPN has been compromised. You need to
ensure that the key is not compromised in the future. - correct answer ✔✔Enable PFS on the
main office and branch offices' ends of the VPN
Your organization has decided to implement a VPN so that remote employees can connect to
the internal network. You decide to implement the VPN using L2TP over IPSec. Which
statements are true of IPSec? - correct answer ✔✔IPSec can work in either tunnel or transport
mode \n\nIPSec uses encapsulation security payload (ESP) & authentication headers (AH) as
security protocols for encapsulation\n\nIPSec framework is used in a VPN implementation to
secure transmissions
Your organization needs to use a pseudo-random number generator (PRNG). You need to decide
on which PRNG to use. What should your primary security consideration be? - correct answer
✔✔The entropy of the PRNG
, All of the following are security risks associated with cloud computing except - correct answer
✔✔False positives
Your organization uses an Ethernet LAN and multiple database servers. The databases are
heavily used and reside on multiple SCSI RAID devices attached to servers. To keep pace with
competitive trends, your organization is considering the use of iSCSI. Which statement will
correctly apply to your LAN if iSCSI is implemented? - correct answer ✔✔The use of iSCSI will
allow SCSI commands to flow over Ethernet
Which two statements comparing a SAN and a NAS are correct? - correct answer ✔✔NAS is
easier to install than a SAN\n\nNAS typically uses either proprietary or trimmed-down version
of an operating system to reduce user licensing costs
Your organization wants to allow employees and partners to remotely access the network. You
must deploy a solution that provides centralized authentication. In addition, you have been
asked to provide accounting and per-command authorization. What should you do? - correct
answer ✔✔Implement a TACACS+ server
Your organization's management has recently spent time discussing attacks against companies
and their infrastructure. During the meeting, the Stuxnet attack was discussed. Against which
type of system did this attack occur? - correct answer ✔✔SCADA
Your company is considering using IPv6 instead of IPv4. Which improvements does IPv6 provide
over IPv4? - correct answer ✔✔Some header fields have been dropped or made optional\n\
nThe IP header options allow more efficient forwarding and less rigid length limits\n
You have been hired as a security consultant for a large organization. During a physical
examination of the 10-story building, you discover several possible security issues. Which
conditions are security concerns? - correct answer ✔✔A glass-enclosed conference room is
located on the tenth floor and contains large screen TVs\n\nEach floor contains a non-locked
wiring closet
