Company A is merging with Company B.
Company B uses mostly hosted services from an outside vendor, while Company A uses mostly in-house products.
The project manager of the merger states the merged systems should meet these goals:
---
Ability to customize systems per department Quick implementation along with an immediate ROI The internal IT team having administrative level control over all products
The project manager states the in-house services are the best solution. Because of staff shortages, the senior security administrator argues that security will be best maintained by continuing to use outsourced services.
Which of the following solutions BEST solves the disagreement?

• A. Arrange a meeting between the project manager and the senior security administrator to review the requirements and determine how critical all the requirements are.
• B. Perform a detailed cost benefit analysis of outsourcing vs. in-sourcing the IT systems and review the system documentation to assess the ROI of in-sourcing. Select COTS products to eliminate development time to meet the ROI goals.
• C. Raise the issue to the Chief Executive Officer (CEO) to escalate the decision to senior management with the recommendation to continue the outsourcing of all IT services.
• D. Calculate the time to deploy and support the in-sourced systems accounting for the staff shortage and compare the costs to the ROI costs minus outsourcing costs. Present the document numbers to management for a final decision.

A security administrator notices a recent increase in workstations becoming compromised by malware. Often, the malware is delivered via drive-by downloads, from malware hosting websites, and is not being detected by the corporate antivirus. Which of the following solutions would provide the BEST protection for the company?

• A. Deploy a cloud-based content filter and enable the appropriate category to prevent further infections.
• B. Deploy a web based gateway antivirus server to intercept viruses before they enter the network.
• C. Deploy a NIPS to inspect and block all web traffic which may contain malware and exploits.
• D. Increase the frequency of antivirus downloads and install updates to all workstations.

A team of security engineers has applied regulatory and corporate guidance to the design of a corporate network. The engineers have generated an SRTM based on their work and a thorough analysis of the complete set of functional and performance requirements in the network specification. Which of the following BEST describes the purpose of an SRTM in this scenario?

• A. To allow certifiers to verify the network meets applicable security requirements
• B. To ensure the security of the network is documented prior to customer delivery
• C. To document the source of all functional requirements applicable to the network
• D. To facilitate the creation of performance testing metrics and test plans

An organization would like to allow employees to use their network username and password to access a third-party service. The company is using Active Directory Federated Services for their directory service. Which of the following should the company ensure is supported by the third-party? (Select TWO).

• A. SAML
• B. Kerberos
• C. LDAP/S
• D. NTLM
• E. OAUTH

An organization is preparing to upgrade its firewall and NIPS infrastructure and has narrowed the vendor choices down to two platforms. The integrator chosen to assist the organization with the deployment has many clients running a mixture of the possible combinations of environments. Which of the following is the MOST comprehensive method for evaluating the two platforms?

• A. Use results from each vendor's test labs to determine adherence to project requirements.
• B. Run virtual test scenarios to validate the potential solutions.
• C. Benchmark each possible solution with the integrators existing client deployments.
• D. Develop testing criteria and evaluate each environment in-house.