CompTIA Security + : Architecture and Design

An organization prepares to deploy specialized medical systems that will remotely collect and monitor health information from each patient's home. The remote systems have limited hardware capabilities, and patients should not be required to purchase additional equipment or perform complex configurations. What should the organization do to ensure that PHI is protected?

• Configure a VPN concentrator with remote device accounts

• Deploy a NAT gateway and configure restrictive ACLs

• Configure tunnel mode IP sec on organization routers

• Deploy X.509 certificates on organization web servers

A security administrator is looking for a way to know when people approach any of several secure areas. The method must be active 24-hours a day. They want to keep recurring expenses related to the solution to a minimum.

What should the administrator use?

• Proximity readers

• A guard dog in each area

• Video surveillance

• A posted human guard in each are

An administrator sets up a VM for testing different versions of an application. The administrator wants to be able to return to the baseline state as quickly as possible between each test.

What should the administrator do?

• Create a snapshot of the VM

• Implement automatic change management

• Configure a sandbox environment

• Run a full backup of the host

An organization prepares to deploy specialized medical systems that will remotely collect and monitor health information from each patient's home. The remote systems have limited hardware capabilities, and patients should not be required to purchase additional equipment or perform complex configurations. What should the organization do to ensure that PHI is protected?

• Deploy X.509 certificates on organization web servers.

• Deploy a NAT gateway and configure restrictive ACLs.

• Configure tunnel mode IPsec on organization routers

• Configure a VPN concentrator with remote device accounts.

A security administrator is looking for a way to know when people approach any of several secure areas. The method must be active 24-hours a day. They want to keep recurring expenses related to the solution to a minimum.

What should the administrator use?

• A guard dog in each area

• A posted human guard in each area

• Video surveillance

• Proximity readers

An administrator sets up a VM for testing different versions of an application. The administrator wants to be able to return to the baseline state as quickly as possible between each test.

What should the administrator do?

• Implement automatic change management

• Create a snapshot of the VM

• Run a full backup of the host

• Configure a sandbox environment

Which server acts as a mirror of the real environment and is used by developers to test and finalize new software prior to rollout?

• Staging

• Proxy

• Production

• Development

What are two advantages of implementing a vendor diversity policy? (Choose two.)

• Simplified administration requirements

• Improved network troubleshooting

• Access to the most recent technologies

• Reduced equipment costs

• Layered defense strategies

A server application produces plain text output. The output needs to be encrypted before being delivered to local and remote client computers. Output varies in length depending on the client request.

The processing requirements and the volume of data sent should be kept to a minimum.

What type of cipher should be used?

• Stream cipher

• Block cipher

• Transport encryption

• Hash encryption

An organization deploys web services on a custom, hardened OS. The organization plans to move most of its operations to the cloud. Which of the following models should the organization select?

• IaaS

• SaaS

• PaaS

• IDaaS