A bank now has a major initiative to virtualize as many servers as possible, due to power and rack space capacity at both data centers. The bank has prioritized by virtualizing older servers first as the hardware is nearing end-of-life.
The two initial migrations include:
- Windows 2000 hosts: domain controllers and front-facing web servers
- RHEL3 hosts: front-facing web servers
Which of the following should the security consultant recommend based on best practices?

• A. One data center should host virtualized web servers and the second data center should host the virtualized domain controllers.
• B. Each data center should contain one virtual environment housing converted Windows 2000 virtual machines and converted RHEL3 virtual machines.
• C. One virtual environment should be present at each data center, each housing a combination of the converted Windows 2000 and RHEL3 virtual machines.
• D. Each data center should contain one virtual environment for the web servers and another virtual environment for the domain controllers.

---- -
Company A has a remote work force that often includes independent contractors and out of state full time employees.
Company A's security engineer has been asked to implement a solution allowing these users to collaborate on projects with the following goals:
All communications between parties need to be encrypted in transport Users must all have the same application sets at the same version All data must remain at Company A's site All users must not access the system between 12:00 and 1:00 as that is the maintenance window Easy to maintain, patch and change application environment
Which of the following solutions should the security engineer recommend to meet the MOST goals?

• A. Create an SSL reverse proxy to a collaboration workspace. Use remote installation service to maintain application version. Have users use full desktop encryption. Schedule server downtime from 12:00 to 1:00 PM.
• B. Install an SSL VPN to Company A's datacenter, have users connect to a standard virtual workstation image, set workstation time of day restrictions.
• C. Schedule server downtime from 12:00 to 1:00 PM, implement a Terminal Server Gateway, use remote installation services to standardize application on user's laptops.
• D. Create an extranet web portal using third party web based office applications. Ensure that Company A maintains the administrative access.

During a specific incident response and recovery process action, the response team determines that it must first speak to the person ultimately responsible for the data. With whom should the response team speak FIRST?

• A. Business Owner
• B. Data Custodian
• C. Data Owner
• D. Data User

The Chief Information Security Officer (CISO) is asking for ways to protect against zero-day exploits. The CISO is concerned that an unrecognized threat could compromise corporate data and result in regulatory fines as well as poor corporate publicity. The network is mostly flat, with split staff/guest wireless functionality. Which of the following equipment MUST be deployed to guard against unknown threats?

• A. Behavior based IPS with a communication link to a cloud based vulnerability and threat feed.
• B. Cloud-based antivirus solution, running as local admin, with push technology for definition updates.
• C. Host based heuristic IPS, segregated on a management VLAN, with direct control of the perimeter firewall ACLs.
• D. Implementation of an offsite data center hosting all company data, as well as deployment of VDI for all client computing needs.

At 9:00 am each morning, all of the virtual desktops in a VDI implementation become extremely slow and/or unresponsive. The outage lasts for around 10 minutes, after which everything runs properly again. The administrator has traced the problem to a lab of thin clients that are all booted at 9:00 am each morning. Which of the following is the MOST likely cause of the problem and the BEST solution? (Select TWO).

• A. The lab desktops are saturating the network while booting.
• B. The lab desktops are using more memory than is available to the host systems.
• C. Install more memory in the thin clients to handle the increased load while booting.
• D. Install 10-Gb uplinks between the hosts and the lab to increase network capacity.
• E. Booting all the lab desktops at the same time is creating excessive I/O.
• F. Add guests with more memory to increase capacity of the infrastructure.
• G. Install faster SSD drives in the storage system used in the infrastructure.
• H. A backup is running on the thin clients at 9am every morning.