CompTIA RC0-C02 問題集

質問 1：
A security administrator wants to calculate the ROI of a security design which includes the purchase of new equipment. The equipment costs $50,000 and it will take 50 hours to install and configure the equipment. The administrator plans to hire a contractor at a rate of $100/hour to do the installation.
Given that the new design and equipment will allow the company to increase revenue and make an additional $100,000 on the first year, which of the following is the ROI expressed as a percentage for the first year?
A. -45 percent
B. 5.5 percent
C. 82 percent
D. 45 percent
正解：C
解説: (Topexam メンバーにのみ表示されます)

質問 2：
A data processing server uses a Linux based file system to remotely mount physical disks on a shared
SAN. The server administrator reports problems related to processing of files where the file appears to be incompletely written to the disk. The network administration team has conducted a thorough review of all network infrastructure and devices and found everything running at optimal performance. Other SAN customers are unaffected. The data being processed consists of millions of small files being written to disk from a network source one file at a time. These files are then accessed by a local Java program for processing before being transferred over the network to a SELinux host for processing. Which of the following is the MOST likely cause of the processing problem?
A. The Linux file system in use cannot write files as fast as they can be read by the Java program resulting in the errors.
B. The virtual file system on the SAN is experiencing a race condition between the reads and writes of network files.
C. The administrator has a PERL script running which disrupts the NIC by restarting the CRON process every 65 seconds.
D. The Java developers accounted for network latency only for the read portion of the processing and not the write process.
正解：A

質問 3：
An extensible commercial software system was upgraded to the next minor release version to patch a security vulnerability. After the upgrade, an unauthorized intrusion into the system was detected.
The software vendor is called in to troubleshoot the issue and reports that all core components were updated properly. Which of the following has been overlooked in securing the system? (Select TWO).
A. The patch caused the system to revert to http.
B. Third-party plug-ins were not patched.
C. The software patch was not cryptographically signed.
D. The company's IDS signatures were not updated.
E. The company's custom code was not patched.
F. The wrong version of the patch was used.
正解：B,E
解説: (Topexam メンバーにのみ表示されます)

質問 4：
An administrator has enabled salting for users' passwords on a UNIX box. A penetration tester must attempt to retrieve password hashes. Which of the following files must the penetration tester use to eventually obtain passwords on the system? (Select TWO).
A. /bin/bash
B. /etc/security
C. /etc/passwd
D. /etc/password
E. /sbin/logon
F. /etc/shadow
正解：C,F
解説: (Topexam メンバーにのみ表示されます)

質問 5：
The technology steering committee is struggling with increased requirements stemming from an increase in telecommuting. The organization has not addressed telecommuting in the past. The implementation of a new SSL-VPN and a VOiP phone solution enables personnel to work from remote locations with corporate assets. Which of the following steps must the committee take FIRST to outline senior management's directives?
A. Develop an information classification scheme that will properly secure data on corporate systems.
B. Work with mid-level managers to identify and document the proper procedures for telecommuting.
C. Publish a policy that addresses the security requirements for working remotely with company equipment.
D. Implement database views and constrained interfaces so remote users will be unable to access PII from personal equipment.
正解：C
解説: (Topexam メンバーにのみ表示されます)

質問 6：
A security administrator was doing a packet capture and noticed a system communicating with an unauthorized address within the 2001::/32 prefix. The network administrator confirms there is no IPv6 routing into or out of the network.
Which of the following is the BEST course of action?
A. Locate and remove the unauthorized 6to4 relay from the network
B. Investigate the network traffic and block UDP port 3544 at the firewall
C. Remove the system from the network and disable IPv6 at the router
D. Disable the switch port and block the 2001::/32 traffic at the firewall
正解：B
解説: (Topexam メンバーにのみ表示されます)

質問 7：
After the install process, a software application executed an online activation process. After a few months, the system experienced a hardware failure. A backup image of the system was restored on a newer revision of the same brand and model device. After the restore, the specialized application no longer works. Which of the following is the MOST likely cause of the problem?
A. The binary files used by the application have been modified by malware.
B. The restored image backup was encrypted with the wrong key.
C. The hash key summary of hardware and installed software no longer match.
D. The application is unable to perform remote attestation due to blocked ports.
正解：C
解説: (Topexam メンバーにのみ表示されます)

質問 8：
A security tester is testing a website and performs the following manual query:
https://www.comptia.com/cookies.jsp?products=5%20and%201=1
The following response is received in the payload:
"ORA-000001: SQL command not properly ended"
Which of the following is the response an example of?
A. Privilege escalation
B. SQL injection
C. Cross-site scripting
D. Fingerprinting
正解：D
解説: (Topexam メンバーにのみ表示されます)

質問 9：
A security manager looked at various logs while investigating a recent security breach in the data center from an external source. Each log below was collected from various security devices compiled from a report through the company's security information and event management server.
Logs:
Log 1:
Feb S 23:55:37.743: %SEC-6-IPACCESSLOGS: list 10 denied 10.2.5.81 3 packets
Log 2:
HTTP://www.company.com/index.php?user=aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
Log 3:
Security Error Alert
Event ID SO: The RDP protocol component X.224 detected an error in the protocol stream and has disconnected the client
Log 4:
Encoder oe = new OracleEncoder ();
String query= "Select user_id FROM user_data WHERE user_name = '"
+ oe.encode ( req.getParameter("userlD")) +"'and user_password = '"
+ oe.encode ( req.getParameter("pwd") ) +" '";
Vulnerabilities
Buffer overflow
SQL injection
ACL xss
Which of the following logs and vulnerabilities would MOST likely be related to the security breach?
(Select TWO).
A. Buffer overflow
B. Log 2
C. Log 4
D. Log 1
E. XSS
F. ACL
G. SQL injection
H. Log 3
正解：A,B
解説: (Topexam メンバーにのみ表示されます)