CompTIA CS0-002 Online Practice Questions and Exam Preparation

CompTIA CS0-002 Online Questions & Answers

• Question 51:

  After a series of Group Policy Object updates, multiple services stopped functioning. The systems administrator believes the issue resulted from a Group Policy Object update but cannot validate which update caused the Issue. Which of the following security solutions would resolve this issue?

  A. Privilege management
  B. Group Policy Object management
  C. Change management
  D. Asset management
  C. Change management

• Question 52:

  A security analyst is reviewing the following log after enabling key-based authentication.

  

  Given the above information, which of the following steps should be performed NEXT to secure the system?

  A. Disable anonymous SSH logins.
  B. Disable password authentication for SSH.
  C. Disable SSHv1.
  D. Disable remote root SSH logins.
  B. Disable password authentication for SSH.

• Question 53:

  A retail corporation with widely distributed store locations and IP space must meet PCI requirements relating to vulnerability scanning. The organization plans to outsource this function to a third party to reduce costs.

  Which of the following should be used to communicate expectations related to the execution of scans?

  A. Vulnerability assessment report
  B. Lessons learned documentation
  C. SLA
  D. MOU
  C. SLA

• Question 54:

  Which of the following software security best practices would prevent an attacker from being able to run arbitrary SQL commands within a web application? (Choose two.)

  A. Parameterized queries
  B. Session management
  C. Input validation
  D. Output encoding
  E. Data protection
  F. Authentication
  A. Parameterized queries
  C. Input validation

  ---

  Explanation/Reference:

  Reference: https://www.ptsecurity.com/ww-en/analytics/knowledge-base/how-to-prevent-sql-injection- attacks/

• Question 55:

  When attempting to do a stealth scan against a system that does not respond to ping, which of the following Nmap commands BEST accomplishes that goal?

  A. nmap -sA -O -noping
  B. nmap -sT -O -P0
  C. nmap -sS -O -P0
  D. nmap -sQ -O -P0
  C. nmap -sS -O -P0

• Question 56:

  Which of the following is a reason to take a DevSecOps approach to a software assurance program?

  A. To find and fix security vulnerabilities earlier in the development process
  B. To speed up user acceptance testing in order to deliver the code to production faster
  C. To separate continuous integration from continuous development in the SDLC
  D. To increase the number of security-related bug fixes worked on by developers
  A. To find and fix security vulnerabilities earlier in the development process

• Question 57:

  The security team for a large, international organization is developing a vulnerability management program. The development staff has expressed concern that the new program will cause service interruptions and downtime as vulnerabilities

  are remedied.

  Which of the following should the security team implement FIRST as a core component of the remediation process to address this concern?

  A. Automated patch management
  B. Change control procedures
  C. Security regression testing
  D. Isolation of vulnerable servers
  C. Security regression testing

• Question 58:

  A cybersecurity analyst is investigating a potential incident affecting multiple systems on a company's internal network. Although there is a negligible impact to performance, the following symptoms are present on each of the affected systems:

  1.

  Existence of a new and unexpected svchost.exe process

  2.

  Persistent, outbound TCP/IP connections to an unknown external host with routine keep-alives transferred

  3.

  DNS query logs showing successful name resolution for an Internet-resident dynamic DNS domain

  If this situation remains unresolved, which of the following will MOST likely occur?

  A. The affected hosts may participate in a coordinated DDoS attack upon command
  B. An adversary may leverage the affected hosts to reconfigure the company's router ACLs
  C. Key files on the affected hosts may become encrypted and require ransom payment for unlock
  D. The adversary may attempt to perform a man-in-the-middle attack
  A. The affected hosts may participate in a coordinated DDoS attack upon command

• Question 59:

  A security analyst is reviewing the following Internet usage trend report:

  

  Which of the following usernames should the security analyst investigate further?

  A. User1
  B. User 2
  C. User 3
  D. User 4
  B. User 2

• Question 60:

  After reviewing the following packet, a cybersecurity analyst has discovered an unauthorized service is running on a company's computer.

  

  Which of the following ACLs, if implemented, will prevent further access ONLY to the unauthorized service and will not impact other services?

  A. DENY TCP ANY HOST 10.38.219.20 EQ 3389
  B. DENY IP HOST 10.38.219.20 ANY EQ 25
  C. DENY IP HOST192.168.1.10 HOST 10.38.219.20 EQ 3389
  D. DENY TCP ANY HOST 192.168.1.10 EQ 25
  A. DENY TCP ANY HOST 10.38.219.20 EQ 3389