Online Access Free RC0-C02 Exam Questions

An analyst connects to a company web conference hosted on www.webconference.com/meeting1D#01234 and observes that numerous guests have been allowed to join, without providing identifying information. The topics covered during the web conference are considered proprietary to the company. Which of the following security concerns does the analyst present to management?

• A.Guest users could present a risk to the integrity of the company's information.
• B.Authenticated users could sponsor guest access that was previously approved by management.
• C.Unauthenticated users could present a risk to the confidentiality of the company's information.
• D.Meeting owners could sponsor guest access if they have passed a background check.

A trucking company delivers products all over the country. The executives at the company would like to have better insight into the location of their drivers to ensure the shipments are following secure routes.
Which of the following would BEST help the executives meet this goal?

• A.Equip each truck with an RFID tag for location services.
• B.Install GSM tracking on each product for end-to-end delivery visibility.
• C.Require drivers to geo-tag documentation at each delivery location.
• D.Implement geo-fencing to track products.

The risk committee has endorsed the adoption of a security system development life cycle (SSDLC) designed to ensure compliance with PCI-DSS, HIPAA, and meet the organization's mission. Which of the following BEST describes the correct order of implementing a five phase SSDLC?

• A.Acquisition, initiation/development, implementation/assessment, operations/maintenance and disposal.
• B.Initiation, acquisition/development, implementation/assessment, operations/maintenance and sunset.
• C.Assessment, initiation/development, implementation/assessment, operations/maintenance and disposal.
• D.Initiation, assessment/acquisition, development/implementation, operations/maintenance and sunset.

A network engineer wants to deploy user-based authentication across the company's wired and wireless infrastructure at layer 2 of the OSI model. Company policies require that users be centrally managed and authenticated and that each user's network access be controlled based on the user's role within the company. Additionally, the central authentication system must support hierarchical trust and the ability to natively authenticate mobile devices and workstations. Which of the following are needed to implement these requirements? (Select TWO).

• A.WAYF
• B.RADIUS
• C.SAML
• D.Shibboleth
• E.PKI
• F.LDAP

A system worth $100,000 has an exposure factor of eight percent and an ARO of four. Which of the following figures is the system's SLE?

• A.$12,000
• B.$8,000
• C.$32,000
• D.$2,000