CompTIA RC0-C02 - CompTIA Advanced Security Practitioner (CASP) Recertification Exam for Continuing Education Exam
Page: 3 / 62
Total 308 questions
Question #11 (Topic: Topic 1)
An application present on the majority of an organizations 1,000 systems is vulnerable to a
buffer overflow attack. Which of the following is the MOST comprehensive way to resolve
the issue?
buffer overflow attack. Which of the following is the MOST comprehensive way to resolve
the issue?
A. Deploy custom HIPS signatures to detect and block the attacks.
B. Validate and deploy the appropriate patch.
C. Run the application in terminal services to reduce the threat landscape.
D. Deploy custom NIPS signatures to detect and block the attacks.
Answer: B
Question #12 (Topic: Topic 1)
Which of the following represents important technical controls for securing a SAN storage
infrastructure? (Select TWO).
infrastructure? (Select TWO).
A. Synchronous copy of data
B. RAID configuration
C. Data de-duplication
D. Storage pool space allocation
E. Port scanning
F. LUN masking/mapping
G. Port mapping
Answer: F,G
Question #13 (Topic: Topic 1)
A data processing server uses a Linux based file system to remotely mount physical disks
on a shared SAN. The server administrator reports problems related to processing of files
where the file appears to be incompletely written to the disk. The network administration
team has conducted a thorough review of all network infrastructure and devices and found
everything running at optimal performance. Other SAN customers are unaffected. The data
being processed consists of millions of small files being written to disk from a network
source one file at a time. These files are then accessed by a local Java program for
processing before being transferred over the network to a SELinux host for processing.
Which of the following is the MOST likely cause of the processing problem?
on a shared SAN. The server administrator reports problems related to processing of files
where the file appears to be incompletely written to the disk. The network administration
team has conducted a thorough review of all network infrastructure and devices and found
everything running at optimal performance. Other SAN customers are unaffected. The data
being processed consists of millions of small files being written to disk from a network
source one file at a time. These files are then accessed by a local Java program for
processing before being transferred over the network to a SELinux host for processing.
Which of the following is the MOST likely cause of the processing problem?
A. The administrator has a PERL script running which disrupts the NIC by restarting the CRON process every 65 seconds.
B. The Java developers accounted for network latency only for the read portion of the processing and not the write process.
C. The virtual file system on the SAN is experiencing a race condition between the reads and writes of network files.
D. The Linux file system in use cannot write files as fast as they can be read by the Java program resulting in the errors.
Answer: D
Question #14 (Topic: Topic 1)
An enterprise must ensure that all devices that connect to its networks have been
previously approved. The solution must support dual factor mutual authentication with
strong identity assurance. In order to reduce costs and administrative overhead, the
security architect wants to outsource identity proofing and second factor digital delivery to
the third party. Which of the following solutions will address the enterprise requirements?
previously approved. The solution must support dual factor mutual authentication with
strong identity assurance. In order to reduce costs and administrative overhead, the
security architect wants to outsource identity proofing and second factor digital delivery to
the third party. Which of the following solutions will address the enterprise requirements?
A. Implementing federated network access with the third party.
B. Using a HSM at the network perimeter to handle network device access.
C. Using a VPN concentrator which supports dual factor via hardware tokens.
D. Implementing 802.1x with EAP-TTLS across the infrastructure.
Answer: D
Question #15 (Topic: Topic 1)
After being notified of an issue with the online shopping cart, where customers are able to
arbitrarily change the price of listed items, a programmer analyzes the following piece of
code used by a web based shopping cart.
SELECT ITEM FROM CART WHERE ITEM=ADDSLASHES($USERINPUT);
The programmer found that every time a user adds an item to the cart, a temporary file is
created on the web server /tmp directory. The temporary file has a name which is
generated by concatenating the content of the $USERINPUT variable and a timestamp in
the form of MM-DD-YYYY, (e.g. smartphone-12-25-2013.tmp) containing the price of the
item being purchased. Which of the following is MOST likely being exploited to manipulate
the price of a shopping carts items?
arbitrarily change the price of listed items, a programmer analyzes the following piece of
code used by a web based shopping cart.
SELECT ITEM FROM CART WHERE ITEM=ADDSLASHES($USERINPUT);
The programmer found that every time a user adds an item to the cart, a temporary file is
created on the web server /tmp directory. The temporary file has a name which is
generated by concatenating the content of the $USERINPUT variable and a timestamp in
the form of MM-DD-YYYY, (e.g. smartphone-12-25-2013.tmp) containing the price of the
item being purchased. Which of the following is MOST likely being exploited to manipulate
the price of a shopping carts items?
A. Input validation
B. SQL injection
C. TOCTOU
D. Session hijacking
Answer: C
