CompTIA CompTIA Certifications CS0-002 Questions & Answers

• Question 491:

  Management is concerned with administrator access from outside the network to a key server in the company. Specifically, firewall rules allow access to the server from anywhere in the company. Which of the following would be an effective solution?

  A. Honeypot

  B. Jump box

  C. Server hardening

  D. Anti-malware

  Correct Answer: B

• Question 492:

  A security administrator determines several months after the first instance that a local privileged user has been routinely logging into a server interactively as "root" and browsing the Internet. The administrator determines this by performing an annual review of the security logs on that server. For which of the following security architecture areas should the administrator recommend review and modification? (Select TWO).

  A. Log aggregation and analysis

  B. Software assurance

  C. Encryption

  D. Acceptable use policies

  E. Password complexity

  F. Network isolation and separation

  Correct Answer: AD

• Question 493:

  A technician recently fixed a computer with several viruses and spyware programs on it and notices the Internet settings were set to redirect all traffic through an unknown proxy. This type of attack is known as which of the following?

  A. Phishing

  B. Social engineering

  C. Man-in-the-middle

  D. Shoulder surfing

  Correct Answer: C

• Question 494:

  A technician receives a report that a user's workstation is experiencing no network connectivity. The technician investigates and notices the patch cable running the back of the user's VoIP phone is routed directly under the rolling chair and

  has been smashed flat over time.

  Which of the following is the most likely cause of this issue?

  A. Cross-talk

  B. Electromagnetic interference

  C. Excessive collisions

  D. Split pairs

  Correct Answer: C

• Question 495:

  A project lead is reviewing the statement of work for an upcoming project that is focused on identifying potential weaknesses in the organization's internal and external network infrastructure. As part of the project, a team of external

  contractors will attempt to employ various attacks against the organization. The statement of work specifically addresses the utilization of an automated tool to probe network resources in an attempt to develop logical diagrams indication

  weaknesses in the infrastructure.

  The scope of activity as described in the statement of work is an example of:

  A. session hijacking

  B. vulnerability scanning

  C. social engineering

  D. penetration testing

  E. friendly DoS

  Correct Answer: D

• Question 496:

  An application development company released a new version of its software to the public. A few days after the release, the company is notified by end users that the application is notably slower, and older security bugs have reappeared in the new release. The development team has decided to include the security analyst during their next development cycle to help address the reported issues. Which of the following should the security analyst focus on to remedy the existing reported problems?

  A. The security analyst should perform security regression testing during each application development cycle.

  B. The security analyst should perform end user acceptance security testing during each application development cycle.

  C. The security analyst should perform secure coding practices during each application development cycle.

  D. The security analyst should perform application fuzzing to locate application vulnerabilities during each application development cycle.

  Correct Answer: A

• Question 497:

  Using a heuristic system to detect an anomaly in a computer's baseline, a system administrator was able to detect an attack even though the company signature based IDS and antivirus did not detect it. Further analysis revealed that the attacker had downloaded an executable file onto the company PC from the USB port, and executed it to trigger a privilege escalation flaw. Which of the following attacks has MOST likely occurred?

  A. Cookie stealing

  B. Zero-day

  C. Directory traversal

  D. XML injection

  Correct Answer: B

• Question 498:

  Datacenter access is controlled with proximity badges that record all entries and exits from the datacenter.

  The access records are used to identify which staff members accessed the data center in the event of equipment theft.

  Which of the following MUST be prevented in order for this policy to be effective?

  A. Password reuse

  B. Phishing

  C. Social engineering

  D. Tailgating

  Correct Answer: D

• Question 499:

  A company discovers an unauthorized device accessing network resources through one of many network drops in a common area used by visitors. The company decides that it wants to quickly prevent unauthorized devices from accessing

  the network but policy prevents the company from making changes on every connecting client.

  Which of the following should the company implement?

  A. Port security

  B. WPA2

  C. Mandatory Access Control

  D. Network Intrusion Prevention

  Correct Answer: A

• Question 500:

  Which of the following is a control that allows a mobile application to access and manipulate information which should only be available by another application on the same mobile device (e.g. a music application posting the name of the current song playing on the device on a social media site)?

  A. Co-hosted application

  B. Transitive trust

  C. Mutually exclusive access

  D. Dual authentication

  Correct Answer: B