312-50v11

312-50v11 practice questions, page 12 of 16, with answer review and explanations.

Question 56

Steve, a scientist who works in a governmental security agency, developed a technological solution to identify people based on walking patterns and implemented this approach to a physical control access. A camera captures people walking and identifies the individuals using Steve's approach. After that, people must approximate their RFID badges. Both the identifications are required to open the door. In this case, we can say:

  1. Although the approach has two phases, it actually implements just one authentication factor
  2. The solution implements the two authentication factors: physical object and physical characteristic
  3. The solution will have a high level of false positives
  4. Biological motion cannot be used to identify people

Question 57

What is not a PCI compliance recommendation?

  1. Use a firewall between the public network and the payment card data.
  2. Use encryption to protect all transmission of card holder data over any public network.
  3. Rotate employees handling credit card transactions on a yearly basis to different departments.
  4. Limit access to card holder data to as few individuals as possible.

Question 58

What is the minimum number of network connections in a multihomed firewall?

  1. 3
  2. 5
  3. 4
  4. 2

Question 59

Suppose your company has just passed a security risk assessment exercise. The results display that the risk of the breach in the main company application is 50%. Security staff has taken some measures and implemented the necessary controls. After that, another security risk assessment was performed showing that risk has decreased to 10%. The risk threshold for the application is 20%. Which of the following risk decisions will be the best for the project in terms of its successful continuation with the most business profit?

  1. Accept the risk
  2. Introduce more controls to bring risk to 0%
  3. Mitigate the risk
  4. Avoid the risk

Question 60

You need to deploy a new web-based software package for your organization. The package requires three separate servers and needs to be available on the Internet. What is the recommended architecture in terms of server placement?

  1. All three servers need to be placed internally
  2. A web server facing the Internet, an application server on the internal network, a database server on the internal network
  3. A web server and the database server facing the Internet, an application server on the internal network
  4. All three servers need to face the Internet so that they can communicate between themselves