CompTIA CompTIA Certifications CS0-002 Questions & Answers

• Question 741:

  A company has a cluster of web servers that is critical to the business. A systems administrator installed a utility to troubleshoot an issue, and the utility caused the entire cluster to 90 offline. Which of the following solutions would work BEST prevent to this from happening again?

  A. Change management

  B. Application whitelisting

  C. Asset management

  D. Privilege management

  Correct Answer: A

• Question 742:

  A development team has asked users to conduct testing to ensure an application meets the needs of the business. Which of the following types of testing docs This describe?

  A. Acceptance testing

  B. Stress testing

  C. Regression testing

  D. Penetration testing

  Correct Answer: A

• Question 743:

  An organization is developing software to match customers' expectations. Before the software goes into production, it must meet the following quality assurance guidelines

  Uncover all the software vulnerabilities.

  Safeguard the interest of the software's end users.

  Reduce the likelihood that a defective program will enter production.

  Preserve the Interests of me software producer

  Which of me following should be performed FIRST?

  A. Run source code against the latest OWASP vulnerabilities.

  B. Document the life-cycle changes that look place.

  C. Ensure verification and vacation took place during each phase.

  D. Store the source code in a software escrow.

  E. Conduct a static analysis of the code.

  Correct Answer: C

• Question 744:

  A company recently experienced a breach of sensitive information that affects customers across multiple geographical regions. Which of the following roles would be BEST suited to determine the breach notification requirements?

  A. Legal counsel

  B. Chief Security Officer

  C. Human resources

  D. Law enforcement

  Correct Answer: A

• Question 745:

  An analyst receives artifacts from a recent Intrusion and is able to pull a domain, IP address, email address, and software version. When of the following points of the Diamond Model of Intrusion Analysis does this intelligence represent?

  A. Infrastructure

  B. Capabilities

  C. Adversary

  D. Victims

  Correct Answer: A

• Question 746:

  After examine a header and footer file, a security analyst begins reconstructing files by scanning the raw data bytes of a hard disk and rebuilding them. Which of the following techniques is the analyst using?

  A. Header analysis

  B. File carving

  C. Metadata analysis

  D. Data recovery

  Correct Answer: B

• Question 747:

  A security is reviewing a vulnerability scan report and notes the following finding:

  

  As part of the detection and analysis procedures, which of the following should the analyst do NEXT?

  A. Patch or reimage the device to complete the recovery

  B. Restart the antiviruses running processes

  C. Isolate the host from the network to prevent exposure

  D. Confirm the workstation's signatures against the most current signatures.

  Correct Answer: D

• Question 748:

  A company is experiencing a malware attack within its network. A security engineer notices many of the impacted assets are connecting outbound to a number of remote destinations and exfiltrating data. The security engineer also see that deployed, up-to-date antivirus signatures are ineffective. Which of the following is the BEST approach to prevent any impact to the company from similar attacks in the future?

  A. IDS signatures

  B. Data loss prevention

  C. Port security

  D. Sinkholing

  Correct Answer: B

  "Preventing data exfiltration is possible with security solutions that ensure data loss and leakage prevention. For example, firewalls can block unauthorized access to resources and systems storing sensitive information. On the other hand, a security information and event management system (SIEM) can secure data in motion, in use, and at rest, secure endpoints, and identify suspicious data transfers" https://www.fortinet.com/resources/cyberglossary/data-exfiltration

• Question 749:

  White reviewing incident reports from the previous night, a security analyst notices the corporate websites were defaced with po mcai propaganda. Which of the following BEST Describes this type of actor?

  A. Hacktivist

  B. Nation-state

  C. insider threat

  D. Organized crime

  Correct Answer: A

• Question 750:

  Industry partners from critical infrastructure organizations were victims of attacks on their SCADA devices. The attacker was able to gain access to the SCADA by logging in to an account with weak credentials. Which of the following identity and access management solutions would help to mitigate this risk?

  A. Multifactor authentication

  B. Manual access reviews

  C. Endpoint detection and response

  D. Role-based access control

  Correct Answer: D

  RBAC helps organizations manage access to critical infrastructure networks by assigning access based on roles. This allows organizations to control who can access specific resources and helps eliminate weak credentials that attackers could exploit. Manual reviews and endpoint detection and response can also help to mitigate risk, but role based access control is the best solution for this scenario.