A software house is developing a new application. The application has the following requirements:
Reduce the number of credential requests as much as possible
Integrate with social networks
Authenticate users
Which of the following is the BEST federation method to use for the application?

• A.OpenID
• B.OAuth
• C.WS-Federation
• D.SAML

Comment: *

Name: *

Email: *

Verification: *

Company A acquired Company B.
During an audit, a security engineer found Company B's environment was inadequately patched. In response, Company A placed a firewall between the two environments until Company B's infrastructure could be integrated into Company A's security program.
Which of the following risk-handling techniques was used?

• A.Avoid
• B.Transfer
• C.Mitigate
• D.Accept

Comment: *

Name: *

Email: *

Verification: *

A review of the past year's attack patterns shows that attackers stopped reconnaissance after finding a susceptible system to compromise. The company would like to find a way to use this information to protect the environment while still gaining valuable attack information.
Which of the following would be BEST for the company to implement?

• A.A WAF
• B.An IDS
• C.A honeypot
• D.A SIEM

Comment: *

Name: *

Email: *

Verification: *

A customer reports being unable to connect to a website at www.test.com to consume services. The customer notices the web application has the following published cipher suite:

Which of the following is the MOST likely cause of the customer's inability to connect?

• A.The default should be on port 80.
• B.Weak ciphers are being used.
• C.The server name should be test.com.
• D.The public key should be using ECDSA.

Comment: *

Name: *

Email: *

Verification: *

A company publishes several APIs for customers and is required to use keys to segregate customer data sets.
Which of the following would be BEST to use to store customer keys?

• A.A localized key store
• B.A trusted platform module
• C.A hardware security module
• D.A public key infrastructure

Comment: *

Name: *

Email: *

Verification: *