CompTIA CS0-001 Online Practice Questions and Exam Preparation

CompTIA CS0-001 Online Questions & Answers

• Question 91:

  The security team for a large, international organization is developing a vulnerability management program. The development staff has expressed concern that the new program will cause service interruptions and downtime as vulnerabilities are remedied.

  Which of the following should the security team implement FIRST as a core component of the remediation process to address this concern?

  A. Automated patch management
  B. Change control procedures
  C. Security regression testing
  D. Isolation of vulnerable servers
  C. Security regression testing

• Question 92:

  A new policy requires the security team to perform web application and OS vulnerability scans. All of the company's web applications use federated authentication and are accessible via a central portal. Which of the following should be implemented to ensure a more thorough scan of the company's web application, while at the same time reducing false positives?

  A. The vulnerability scanner should be configured to perform authenticated scans.
  B. The vulnerability scanner should be installed on the web server.
  C. The vulnerability scanner should implement OS and network service detection.
  D. The vulnerability scanner should scan for known and unknown vulnerabilities.
  A. The vulnerability scanner should be configured to perform authenticated scans.

• Question 93:

  Policy allows scanning of vulnerabilities during production hours, but production servers have been crashing lately due to unauthorized scans performed by junior technicians. Which of the following is the BEST solution to avoid production server downtime due to these types of scans?

  A. Transition from centralized to agent-based scans.
  B. Require vulnerability scans be performed by trained personnel.
  C. Configure daily-automated detailed vulnerability reports.
  D. Implement sandboxing to analyze the results of each scan.
  E. Scan only as required for regulatory compliance.
  B. Require vulnerability scans be performed by trained personnel.

• Question 94:

  The board of directors made the decision to adopt a cloud-first strategy. The current security infrastructure was designed for on-premises implementation. A critical application that is subject to the Federal Information Security Management Act (FISMA) of 2002 compliance has been identified as a candidate for a hybrid cloud deployment model. Which of the following should be conducted FIRST?

  A. Develop a request for proposal.
  B. Perform a risk assessment.
  C. Review current security controls.
  D. Review the SLA for FISMA compliance.
  C. Review current security controls.

• Question 95:

  A worm was detected on multiple PCs within the remote office. The security analyst recommended that the remote office be blocked from the corporate network during the incident response. Which of the following processes BEST describes this recommendation?

  A. Logical isolation of the remote office
  B. Sanitization of the network environment
  C. Segmentation of the network
  D. Secure disposal of affected systems
  A. Logical isolation of the remote office

• Question 96:

  Which of the following tools should a cybersecurity analyst use to verify the integrity of a forensic image before and after an investigation?

  A. strings
  B. sha1sum
  C. file
  D. dd
  E. gzip
  B. sha1sum

• Question 97:

  A security analyst receives a mobile device with symptoms of a virus infection. The virus is morphing whenever it is from sandbox to sandbox to analyze. Which of the following will help to identify the number of variations through the analysis life cycle?

  A. Journaling
  B. Hashing utilities
  C. Log viewers
  D. OS and process analysis
  D. OS and process analysis

• Question 98:

  A security architect is reviewing the options for performing input validation on incoming web form submissions. Which of the following should the architect as the MOST secure and manageable option?

  A. Client-side whitelisting
  B. Server-side whitelisting
  C. Server-side blacklisting
  D. Client-side blacklisting
  B. Server-side whitelisting

• Question 99:

  A vulnerability scan came back with critical findings for a Microsoft SharePoint server:

  

  Which of the following actions should be taken?

  A. Remove Microsoft Office from the server.
  B. Document the finding as an exception.
  C. Install a newer version of Microsoft Office on the server.
  D. Patch Microsoft Office on the server.
  D. Patch Microsoft Office on the server.

• Question 100:

  Which of the following has the GREATEST impact to the data retention policies of an organization?

  A. The CIA classification matrix assigned to each piece of data
  B. The level of sensitivity of the data established by the data owner
  C. The regulatory requirements concerning the data set
  D. The technical constraints of the technology used to store the data
  D. The technical constraints of the technology used to store the data