Question 1

A security architect has designated that a server segment of an enterprise network will require each server to have secure and measured boot capabilities. The architect now wishes to ensure service consumers and peers can verify the integrity of hosted services. Which of the following capabilities must the architect consider for enabling the verification?

Accepted Answer

A)  Centralized attestation server 
B)  Enterprise HSM 
C)  vTPM 
D)  SIEM

Question 2

Which of the following BEST represents a risk associated with merging two enterprises during an acquisition?

Accepted Answer

A)  The consolidation of two different IT enterprises increases the likelihood of the data loss because there are now two backup systems 
B)  Integrating two different IT systems might result in a successful data breach if threat intelligence is not shared between the two enterprises 
C)  Merging two enterprise networks could result in an expanded attack surface and could cause outages if trust and permission issues are not handled carefully 
D)  Expanding the set of data owners requires an in-depth review of all data classification decisions, impacting availability during the review

Exam 3: CompTIA Advanced Security Practitioner (CASP+) CAS-003

Which of the following BEST represents a risk associated with merging two enterprises during an acquisition?