CompTIA RC0-C02 : CompTIA Advanced Security Practitioner (CASP) Recertification Exam for Continuing Education

The following has been discovered in an internally developed application:
Error - Memory allocated but not freed:
char *myBuffer = malloc(BUFFER_SIZE); if (myBuffer != NULL) {
*myBuffer = STRING_WELCOME_MESSAGE; printf("Welcome to: %s\n", myBuffer);
} exit(0);
Which of the following security assessment methods are likely to reveal this security weakness? (Select
TWO).

• A. Static code analysis
• B. Application sandboxing
• C. Manual code review
• D. Penetration testing
• E. Black box testing
• F. Memory dumping

The risk committee has endorsed the adoption of a security system development life cycle (SSDLC) designed to ensure compliance with PCI-DSS, HIPAA, and meet the organization's mission. Which of the following BEST describes the correct order of implementing a five phase SSDLC?

• A. Initiation, assessment/acquisition, development/implementation, operations/maintenance and sunset.
• B. Acquisition, initiation/development, implementation/assessment, operations/maintenance and disposal.
• C. Assessment, initiation/development, implementation/assessment, operations/maintenance and disposal.
• D. Initiation, acquisition/development, implementation/assessment, operations/maintenance and sunset.

ABC Corporation has introduced token-based authentication to system administrators due to the risk of password compromise. The tokens have a set of HMAC counter-based codes and are valid until they are used. Which of the following types of authentication mechanisms does this statement describe?

• A. CHAP
• B. HOTP
• C. TOTP
• D. PAP

A developer has implemented a piece of client-side JavaScript code to sanitize a user's provided input to a web page login screen. The code ensures that only the upper case and lower case letters are entered in the username field, and that only a 6-digit PIN is entered in the password field. A security administrator is concerned with the following web server log:
1 0.235.62.11 [02/Mar/2014:06:13:04] "GET
/site/script.php?user=admin&pass=pass%20or%201=1 HTIP/1.1" 200 5724
Given this log, which of the following is the security administrator concerned with and which fix should be implemented by the developer?

• A. The security administrator is concerned with SQL injection, and the developer should implement server side input validation.
• B. The security administrator is concerned with nonprintable characters being used to gain administrative access, and the developer should strip all nonprintable characters.
• C. The security administrator is concerned with XSS, and the developer should normalize Unicode characters on the browser side.
• D. The security administrator is concerned that someone may log on as the administrator, and the developer should ensure strong passwords are enforced.

At 9:00 am each morning, all of the virtual desktops in a VDI implementation become extremely slow and/or unresponsive. The outage lasts for around 10 minutes, after which everything runs properly again.
The administrator has traced the problem to a lab of thin clients that are all booted at 9:00 am each morning. Which of the following is the MOST likely cause of the problem and the BEST solution? (Select
TWO).

• A. A backup is running on the thin clients at 9am every morning.
• B. The lab desktops are using more memory than is available to the host systems.
• C. Install 10-Gb uplinks between the hosts and the lab to increase network capacity.
• D. Install more memory in the thin clients to handle the increased load while booting.
• E. The lab desktops are saturating the network while booting.
• F. Install faster SSD drives in the storage system used in the infrastructure.
• G. Add guests with more memory to increase capacity of the infrastructure.
• H. Booting all the lab desktops at the same time is creating excessive 1/0.