CompTIA CompTIA Certifications CS0-002 Questions & Answers

• Question 681:

  Which of the following APT adversary archetypes represent non-nation-state threat actors? (Select TWO)

  A. Kitten

  B. Panda

  C. Tiger

  D. Jackal

  E. Bear

  F. Spider

  Correct Answer: DF

• Question 682:

  During the security assessment of a new application, a tester attempts to log in to the application but receives the following message incorrect password for given username. Which of the following can the tester recommend to decrease the likelihood that a malicious attacker will receive helpful information?

  A. Set the web page to redirect to an application support page when a bad password is entered.

  B. Disable error messaging for authentication

  C. Recognize that error messaging does not provide confirmation of the correct element of authentication

  D. Avoid using password-based authentication for the application

  Correct Answer: B

• Question 683:

  Which of the following BEST describes what an organizations incident response plan should cover regarding how the organization handles public or private disclosures of an incident?

  A. The disclosure section should focus on how to reduce the likelihood customers will leave due to the incident.

  B. The disclosure section should contain the organization's legal and regulatory requirements regarding disclosures.

  C. The disclosure section should include the names and contact information of key employees who are needed for incident resolution

  D. The disclosure section should contain language explaining how the organization will reduce the likelihood of the incident from happening m the future.

  Correct Answer: B

• Question 684:

  A security analyst sees the following OWASP ZAP output from a scan that was performed against a modern version of Windows while testing for client-side vulnerabilities:

  Alert Detail Low (Medium) Web Browser XSS Protection not enabled Description: Web browser XSS protection not enabled, or disabled by the configuration of the HTTP Response header

  URL: https://domain.com/sun/ray

  Which of the following is the MOST likely solution to the listed vulnerability?

  A. Enable the browser's XSS filter.

  B. Enable Windows XSS protection

  C. Enable the browser's protected pages mode

  D. Enable server-side XSS protection

  Correct Answer: A

• Question 685:

  The help desk is having difficulty keeping up with all onboarding and offboarding requests. Managers often submit, requests for new users at the last minute. causing the help desk to scramble to create accounts across many different Interconnected systems. Which of the following solutions would work BEST to assist the help desk with the onboarding and offboarding process while protecting the company's assets?

  A. MFA

  B. CASB

  C. SSO

  D. RBAC

  Correct Answer: D

• Question 686:

  A security analyst is reviewing a firewall usage report that contains traffic generated over the last 30 minutes in order to locate unusual traffic patterns:

  

  Which of the following source IP addresses does the analyst need to investigate further?

  A. 10.18.76.179

  B. 10.50.180.49

  C. 192.168.48.147

  D. 192.168.100.5

  Correct Answer: C

• Question 687:

  Which of the following BEST describes how logging and monitonng work when entering into a public cloud relationship with a service provider?

  A. Logging and monitonng are not needed in a public cloud environment

  B. Logging and monitonng are done by the data owners

  C. Logging and monitonng duties are specified in the SLA and contract

  D. Logging and monitonng are done by the service provider

  Correct Answer: C

• Question 688:

  A company wants to configure the environment to allow passive network monitonng. To avoid disrupting the sensitive network, which of the following must be supported by the scanner's NIC to assist with the company's request?

  A. Port bridging

  B. Tunnel all mode

  C. Full-duplex mode

  D. Port mirroring

  E. Promiscuous mode

  Correct Answer: D

• Question 689:

  An organization has a policy that requires servers to be dedicated to one function and unneeded services to be disabled. Given the following output from an Nmap scan of a web server:

  

  Which of the following ports should be closed?

  A. 22

  B. 80

  C. 443

  D. 1433

  Correct Answer: D

  "servers to be dedicated to one function..." http/s and SQL are two functions. I will select D, but agree with folks that the question is horribly written, and the person who wrote it was most likely drunk.

• Question 690:

  A security analyst at exampte.com receives a SIEM alert for an IDS signature and reviews the associated packet capture and TCP stream: Winch of the following actions should the security analyst lake NEXT?

  

  

  A. Review the known Apache vulnerabilities to determine if a compromise actually occurred

  B. Contact the application owner for connect example local tor additional information

  C. Mark the alert as a false positive scan coming from an approved source.

  D. Raise a request to the firewall team to block 203.0.113.15.

  Correct Answer: B

  An authenticated scan reports weaknesses exposed to the authenticated users of the system, as all the hosted services can be accessed with a right set of credentials. An -unauthenticated scan reports weaknesses from a public viewpoint

  (this is what the system looks like to the unauthenticated users) of the system.

  So the scan may be valid but instead of concluding asking for additional information from the application owner doesn't hurt and confirms if this activity is done internally.