Due to cost and implementation time pressures, a security architect has allowed a NAS to be used instead of a SAN for a non-critical, low volume database. Which of the following would make a NAS unsuitable for a business critical, high volume database application that required a high degree of data confidentiality and data availability? (Select THREE).

• A. File level transfer of data
• B. Zoning and LUN security
• C. Multipath
• D. Block level transfer of data
• E. Latency
• F. Broadcast storms
• G. File level encryption

A company runs large computing jobs only during the overnight hours. To minimize the amount of capital investment in equipment, the company relies on the elastic computing services of a major cloud computing vendor. Because the virtual resources are created and destroyed on the fly across a large pool of shared resources, the company never knows which specific hardware platforms will be used from night to night. Which of the following presents the MOST risk to confidentiality in this scenario?

• A. Distribution of the job to multiple data centers
• B. Network transmission of cryptographic keys
• C. Loss of physical control of the servers
• D. Data scraped from the hardware platforms

The security administrator is receiving numerous alerts from the internal IDS of a possible Conficker infection spreading through the network via the Windows file sharing services. Given the size of the company which deploys over 20,000 workstations and 1,000 servers, the security engineer believes that the best course of action is to block the file sharing service across the organization by placing ACLs on the internal routers.
Which of the following should the security administrator do before applying the ACL?

• A. Call an emergency change management meeting to ensure the ACL will not impact core business functions.
• B. Quickly research best practices with respect to stopping Conficker infections and implement the solution.
• C. Consult with the rest of the security team and get approval on the solution by all the team members and the team manager.
• D. Apply the ACL immediately since this is an emergency that could lead to a widespread data compromise.

A large hospital has implemented BYOD to allow doctors and specialists the ability to access patient medical records on their tablets. The doctors and specialists access patient records over the hospital's guest WiFi network which is isolated from the internal network with appropriate security controls. The patient records management system can be accessed from the guest network and requires two factor authentication. Using a remote desktop type interface, the doctors and specialists can interact with the hospital's system. Cut and paste and printing functions are disabled to prevent the copying of data to BYOD devices. Which of the following are of MOST concern? (Select TWO).

• A. The guest WiFi may be exploited allowing non-authorized individuals access to confidential patient data.
• B. Privacy could be compromised as patient records can be viewed in uncontrolled areas.
• C. Remote wiping of devices should be enabled to ensure any lost device is rendered inoperable.
• D. Malware may be on BYOD devices which can extract data via key logging and screen scrapes.
• E. Device encryption has not been enabled and will result in a greater likelihood of data loss.