CAS-002 Second 48

An educational institution would like to make computer labs available to remote students. The labs are used for various IT networking, security, and programming courses. The requirements are:

Each lab must be on a separate network segment.
Labs must have access to the Internet, but not other lab networks.
Student devices must have network access, not simple access to hosts on the lab networks.
Students must have a private certificate installed before gaining access.
Servers must have a private certificate installed locally to provide assurance to the students.
All students must use the same VPN connection profile.

Which of the following components should be used to achieve the design in conjunction with directory services?

L2TP VPN over TLS for remote connectivity, SAML for federated authentication, firewalls between each lab segment

SSL VPN for remote connectivity, directory services groups for each lab group, ACLs on routing equipment

IPSec VPN with mutual authentication for remote connectivity, RADIUS for authentication, ACLs on network equipment

Cloud service remote access tool for remote connectivity, OAuth for authentication, ACL on routing equipment

A small company is developing a new Internet-facing web application. The security requirements are:

Users of the web application must be uniquely identified and authenticated.
Users of the web application will not be added to the company’s directory services.
Passwords must not be stored in the code.

Which of the following meets these requirements?

Use OpenID and allow a third party to authenticate users.

Use TLS with a shared client certificate for all users.

Use SAML with federated directory services.

Use Kerberos and browsers that support SAML.

A multi-national company has a highly mobile workforce and minimal IT infrastructure. The company utilizes a BYOD and social media policy to integrate presence technology into global collaboration tools by individuals and teams. As a result of the dispersed employees and frequent international travel, the company is concerned about the safety of employees and their families when moving in and out of certain countries. Which of the following could the company view as a downside of using presence technology?

Insider threat

Network reconnaissance

Physical security

Industrial espionage

CAS-002 Second 48

More Quizzes