A project manager is working with system owners to develop maintenance windows for system patching and upgrades in a cloud-based PaaS environment. Management has indicated one maintenance windows will be authorized per month, but clients have stated they require quarterly maintenance windows to meet their obligations. Which of the following documents should the project manager review?

• A.SOW
• B.SLA
• C.SRTM
• D.MOU

Comment: *

Name: *

Email: *

Verification: *

A company wants to extend its help desk availability beyond business hours. The Chief Information Officer (CIO) decides to augment the help desk with a third-party service that will answer calls and provide Tier 1 problem resolution, such as password resets and remote assistance. The security administrator implements the following firewall change:

The administrator provides the appropriate path and credentials to the third-party company. Which of the following technologies is MOST likely being used to provide access to the third company?

• A.LDAP
• B.SAML
• C.OpenID
• D.RADIUS
• E.WAYF

Comment: *

Name: *

Email: *

Verification: *

An organization is preparing to develop a business continuity plan. The organization is required to meet regulatory requirements relating to confidentiality and availability, which are well-defined. Management has expressed concern following initial meetings that the organization is not fully aware of the requirements associated with the regulations.
Which of the following would be MOST appropriate for the project manager to solicit additional resources for during this phase of the project?

• A.Risk analysis
• B.Business impact assessment
• C.Gap assessment
• D.Security requirements traceability matrix
• E.After-action reports

Comment: *

Name: *

Email: *

Verification: *

An online bank has contracted with a consultant to perform a security assessment of the bank's web portal.
The consultant notices the login page is linked from the main page with HTTPS, but when the URL is changed to HTTP, the browser is automatically redirected back to the HTTPS site. Which of the following is a concern for the consultant, and how can it be mitigated?

• A.XSS could be used to inject code into the login page during the redirect to the HTTPS site. The consultant should implement a WAF to prevent this.
• B.The consultant is concerned the site is using an older version of the SSL 3.0 protocol that is vulnerable to a variety of attacks. Upgrading the site to TLS 1.0 would mitigate this issue.
• C.The HTTP traffic is vulnerable to network sniffing, which could disclose usernames and passwords to an attacker. The consultant should recommend disabling HTTP on the web server.
• D.A successful MITM attack Could intercept the redirect and use sslstrip to decrypt further HTTPS traffic.
  Implementing HSTS on the web server would prevent this.

Comment: *

Name: *

Email: *

Verification: *

A project manager is working with system owners to develop maintenance windows for system pathing and upgrades in a cloud-based PaaS environment. Management has indicated one maintenance windows will be authorized per month, but clients have stated they require quarterly maintenance windows to meet their obligations. Which of the following documents should the project manager review?

• A.MOU
• B.SOW
• C.SRTM
• D.SLA

Comment: *

Name: *

Email: *

Verification: *