An organization is implementing a virtualized thin-client solution for normal user computing and access.
During a review of the architecture, concerns were raised that an attacker could gain access to multiple user environments by simply gaining a foothold on a single one with malware. Which of the following reasons BEST explains this?

• A.A worm on one virtual environment could spread to others by taking advantage of guest OS networking services vulnerabilities.
• B.Malware on one virtual user environment could be copied to all others by the attached network storage controller.
• C.Malware on one virtual environment could enable pivoting to others by leveraging vulnerabilities in the hypervisor.
• D.One virtual environment may have one or more application-layer vulnerabilities, which could allow an attacker to escape that environment.

Comment: *

Name: *

Email: *

Verification: *

A large company is preparing to merge with a smaller company. The smaller company has been very profitable, but the smaller company's main applications were created in-house. Which of the following actions should the large company's security administrator take in preparation for the merger?

• A.A review of the mitigations implemented from the most recent audit findings of the smaller company should be performed.
• B.An ROI calculation should be performed to determine which company's application should be used.
• C.A security assessment should be performed to establish the risks of integration or co-existence.
• D.A regression test should be performed on the in-house software to determine security risks associated with the software.

Comment: *

Name: *

Email: *

Verification: *

An engineer needs to provide access to company resources for several offshore contractors. The contractors require:
* Access to a number of applications, including internal websites
* Access to database data and the ability to manipulate it
* The ability to log into Linux and Windows servers remotely
Which of the following remote access technologies are the BEST choices to provide all of this access securely? (Choose two.)

• A.Telnet
• B.VPN
• C.VTC
• D.VRRP
• E.VDI
• F.VLAN

Comment: *

Name: *

Email: *

Verification: *

A managed service provider is designing a log aggregation service for customers who no longer want to manage an internal SIEM infrastructure. The provider expects that customers will send all types of logs to them, and that log files could contain very sensitive entries. Customers have indicated they want on- premises and cloud-based infrastructure logs to be stored in this new service. An engineer, who is designing the new service, is deciding how to segment customers.
Which of the following is the BEST statement for the engineer to take into consideration?

• A.The managed service provider should outsource security of the platform to an existing cloud company.
  This will allow the new log service to be launched faster and with well-tested security controls.
• B.Single-tenancy is often more expensive and has less efficient resource utilization. Multi-tenancy may increase the risk of cross-customer exposure in the event of service vulnerabilities.
• C.Due to the likelihood of large log volumes, the service provider should use a multi-tenancy model for the data storage tier, enable data deduplication for storage cost efficiencies, and encrypt data at rest.
• D.The most secure design approach would be to give customers on-premises appliances, install agents on endpoints, and then remotely manage the service via a VPN.

Comment: *

Name: *

Email: *

Verification: *

Part of the procedure for decommissioning a database server is to wipe all local disks, as well as SAN LUNs allocated to the server, even though the SAN itself is not being decommissioned.
Which of the following is the reason for wiping the SAN LUNs?

• A.The data may be replicated to other sites that are not as secure.
• B.The data is not encrypted during transport.
• C.LUN masking will prevent the next server from accessing the LUNs.
• D.Data remnants remain on the LUN that could be read by other servers.

Comment: *

Name: *

Email: *

Verification: *