CompTIA CompTIA Certifications CS0-002 Questions & Answers

• Question 301:

  Which of the following organizations would have to remediate embedded controller vulnerabilities?

  A. Banking institutions

  B. Public universities

  C. Regulatory agencies

  D. Hydroelectric facilities

  Correct Answer: D

• Question 302:

  The following IDS log was discovered by a company's cybersecurity analyst:

  

  Which of the following was launched against the company based on the IDS log?

  A. SQL injection attack

  B. Cross-site scripting attack

  C. Buffer overflow attack

  D. Online password crack attack

  Correct Answer: C

• Question 303:

  While reviewing firewall logs, a security analyst at a military contractor notices a sharp rise in activity from a foreign domain known to have well-funded groups that specifically target the company's RandD department. Historical data reveals other corporate assets were previously targeted. This evidence MOST likely describes:

  A. an APT.

  B. DNS harvesting.

  C. a zero-day exploit.

  D. corporate espionage.

  Correct Answer: A

• Question 304:

  A corporation employs a number of small-form-factor workstations and mobile devices, and an incident response team is therefore required to build a forensics kit with tools to support chip-off analysis. Which of the following tools would BEST meet this requirement?

  A. JTAG adapters

  B. Last-level cache readers

  C. Write-blockers

  D. ZIF adapters

  Correct Answer: A

• Question 305:

  In order to the leverage the power of data correlation with Nessus, a cybersecurity analyst must first be able to create a table for the scan results.

  Given the following snippet of code:

  

  Which of the following output items would be correct?

  

  A. Option A

  B. Option B

  C. Option C

  D. Option D

  Correct Answer: C

• Question 306:

  A worm was detected on multiple PCs within the remote office. The security analyst recommended that the remote office be blocked from the corporate network during the incident response. Which of the following processes BEST describes this recommendation?

  A. Logical isolation of the remote office

  B. Sanitization of the network environment

  C. Segmentation of the network

  D. Secure disposal of affected systems

  Correct Answer: A

• Question 307:

  While conducting research on malicious domains, a threat intelligence analyst received a blue screen of death. The analyst rebooted and received a message stating that the computer had been locked and could only be opened by following the instructions on the screen. Which of the following combinations describes the MOST likely threat and the PRIMARY mitigation for the threat?

  A. Ransomware and update antivirus

  B. Account takeover and data backups

  C. Ransomware and full disk encryption

  D. Ransomware and data backups

  Correct Answer: D

• Question 308:

  The software development team pushed a new web application into production for the accounting department. Shortly after the application was published, the head of the accounting department informed IT operations that the application was not performing as intended. Which of the following SDLC best practices was missed?

  A. Peer code reviews

  B. Regression testing

  C. User acceptance testing

  D. Fuzzing

  E. Static code analysis

  Correct Answer: C

• Question 309:

  The development team recently moved a new application into production for the accounting department. After this occurred, the Chief Information Officer (CIO) was contacted by the head of accounting because the application is missing a key piece of functionality that is needed to complete the corporation's quarterly tax returns. Which of the following types of testing would help prevent this from reoccurring?

  A. Security regression testing

  B. User acceptance testing

  C. Input validation testing

  D. Static code testing

  Correct Answer: B

• Question 310:

  A security analyst with an international response team is working to isolate a worldwide distribution of ransomware. The analyst is working with international governing bodies to distribute advanced intrusion detection routines for this variant of ransomware. Which of the following is the MOST important step with which the security analyst should comply?

  A. Security operations privacy law

  B. Export restrictions

  C. Non-disclosure agreements

  D. Incident response forms

  Correct Answer: D