An organization developed a social media application that is used by customers in multiple remote geographic locations around the world. The organization's headquarters and only datacenter are located in New York City. The Chief Information Security Officer wants to ensure the following requirements are met for the social media application:
Low latency for all mobile users to improve the users' experience
SSL offloading to improve web server performance
Protection against DoS and DDoS attacks
High availability
Which of the following should the organization implement to BEST ensure all requirements are met?

• A.A cache server farm in its datacenter
• B.A load-balanced group of reverse proxy servers with SSL acceleration
• C.A CDN with the origin set to its datacenter
• D.Dual gigabit-speed Internet connections with managed DDoS prevention

Comment: *

Name: *

Email: *

Verification: *

A security architect is reviewing the following proposed corporate firewall architecture and configuration:

Both firewalls are stateful and provide Layer 7 filtering and routing. The company has the following requirements:
Web servers must receive all updates via HTTP/S from the corporate network.
Web servers should not initiate communication with the Internet.
Web servers should only connect to preapproved corporate database servers.
Employees' computing devices should only connect to web services over ports 80 and 443.
Which of the following should the architect recommend to ensure all requirements are met in the MOST secure manner? (Choose two.)

• A.Add the following to Firewall_B: 15 PERMIT FROM 0.0.0.0/0 TO 10.0.0.0/16 TCP/UDP 0-65535
• B.Add the following to Firewall_A: 15 PERMIT FROM 10.0.0.0/16 TO 0.0.0.0/0 TCP 80,443
• C.Add the following to Firewall_B: 15 PERMIT FROM 10.0.0.0/16 TO 0.0.0.0 TCP/UDP 0-65535
• D.Add the following to Firewall_B: 15 PERMIT FROM 192.168.1.0/24 TO 10.0.2.10/32 TCP 80,443
• E.Add the following to Firewall_A: 15 PERMIT FROM 192.168.1.0/24 TO 0.0.0.0 TCP 80,443
• F.Add the following to Firewall_A: 15 PERMIT FROM 10.0.0.0/16 TO 0.0.0.0/0 TCP/UDP 0-65535

Comment: *

Name: *

Email: *

Verification: *

A developer wants to maintain integrity to each module of a program and ensure the code cannot be altered by malicious users.
Which of the following would be BEST for the developer to perform? (Choose two.)

• A.Implement certificate-based authentication.
• B.Make the DACL read-only.
• C.Verify MD5 hashes.
• D.Encrypt with 3DES.
• E.Compress the program with a password.
• F.Utilize code signing by a trusted third party.

Comment: *

Name: *

Email: *

Verification: *

An organization wants to perform a scan of all its systems against best practice security configurations.
Which of the following SCAP standards, when combined, will enable the organization to view each of the configuration checks in a machine-readable checklist format for fill automation? (Choose two.)

• A.OVAL
• B.CVSS
• C.XCCDF
• D.CPE
• E.ARF
• F.CVE

Comment: *

Name: *

Email: *

Verification: *

An energy company is required to report the average pressure of natural gas used over the past quarter. A PLC sends data to a historian server that creates the required reports.
Which of the following historian server locations will allow the business to get the required reports in an OT and IT environment?

• A.In the IT environment, allow PLCs to send data from the OT environment to the IT environment.
• B.Use a screened subnet between the OT and IT environments.
• C.In the OT environment, use a VPN from the IT environment into the OT environment.
• D.In the OT environment, allow IT traffic into the OT environment.

Comment: *

Name: *

Email: *

Verification: *