報名費並不便宜，沒有人想為 RC0-C02 付第二次考試費。與其抱著僥倖上考場，不如先用 Fast2test 的 310 道練習題徹底檢驗實力，爭取一次就把 CompTIA Advanced Security Practitioner (CASP) Recertification Exam for Continuing Education 考到手。

CompTIA RC0-C02 考試概覽:

CompTIA RC0-C02 考試大綱主題:

關於 RC0-C02 考試，你可能想知道的事

最新的 CASP Recertification RC0-C02 免費考試真題：

問題 #1

A vulnerability scanner report shows that a client-server host monitoring solution operating in the credit card corporate environment is managing SSL sessions with a weak algorithm which does not meet corporate policy. Which of the following are true statements? (Select TWO).

A. The client-server handshake could not negotiate strong ciphers.
B. The client-server handshake is based on TLS authentication.
C. The client-server handshake is configured with a wrong priority.
D. The X509 V3 certificate was issued by a non trusted public C
E. The client-server implements client-server mutual authentication with different certificates.
F. The X509 V3 certificate is expired.

問題 #2

In order for a company to boost profits by implementing cost savings on non-core business activities, the
IT manager has sought approval for the corporate email system to be hosted in the cloud. The compliance officer has been tasked with ensuring that data lifecycle issues are taken into account.
Which of the following BEST covers the data lifecycle end-to-end?

A. Information classification, vendor selection, and the RFP process
B. Creation and secure destruction of mail accounts, emails, and calendar items
C. Securing virtual environments, appliances, and equipment that handle email
D. Data provisioning, processing, in transit, at rest, and de-provisioning

問題 #3

An organization would like to allow employees to use their network username and password to access a third-party service. The company is using Active Directory Federated Services for their directory service.
Which of the following should the company ensure is supported by the third-party? (Select TWO).

A. LDAP/S
B. OAUTH
C. NTLM
D. SAML
E. Kerberos

問題 #4

An employee is performing a review of the organization's security functions and noticed that there is some cross over responsibility between the IT security team and the financial fraud team. Which of the following security documents should be used to clarify the roles and responsibilities between the teams?

A. OLA
B. BPA
C. BIA
D. MOU

問題 #5

The Chief Executive Officer (CEO) of a corporation purchased the latest mobile device and wants to connect it to the company's internal network. The Chief Information Security Officer (CISO) was told to research and recommend how to secure this device. Which of the following recommendations should be implemented to keep the device from posing a security risk to the company?

A. Encryption of the non-volatile memory and a password or Pl N to access the device.
B. A password or PIN to access the device and a corporate policy to prevent sensitive information from residing on a mobile device.
C. A corporate policy to prevent sensitive information from residing on a mobile device and antivirus software.
D. Encryption of the non-volatile memory and a corporate policy to prevent sensitive information from residing on a mobile device.

問題與答案：