CompTIA CS0-001 Online Practice Questions and Exam Preparation

CompTIA CS0-001 Online Questions & Answers

• Question 161:

  An organization wants to remediate vulnerabilities associated with its web servers. An initial vulnerability scan has been performed, and analysts are reviewing the results. Before starting any remediation, the analysts want to remove false positives to avoid spending time on issues that are not actual vulnerabilities. Which of the following would be an indicator of a likely false positive?

  A. Reports show the scanner compliance plug-in is out-of-date.
  B. Any items labeled `low' are considered informational only.
  C. The scan result version is different from the automated asset inventory.
  D. `HTTPS' entries indicate the web page is encrypted securely.
  B. Any items labeled `low' are considered informational only.

• Question 162:

  HOTSPOT

  A security analyst suspects that a workstation may be beaconing to a command and control server. You must inspect the logs from the company's web proxy server and the firewall to determine the best course of action to take in order to

  neutralize the threat with minimum impact to the organization.

  Instructions:

  If at any time you would like to bring back the initial state of the simulation, please select the Reset button. When you have completed the simulation, please select the Done button to submit. Once the simulation is submitted, please select the

  Next button to continue.

  Hot Area:

  

  

• Question 163:

  An analyst is reviewing a list of vulnerabilities, which were reported from a recent vulnerability scan of a Linux server. Which of the following is MOST likely to be a false positive?

  A. OpenSSH/OpenSSL Package Random Number Generator Weakness
  B. Apache HTTP Server Byte Range DoS
  C. GDI+ Remote Code Execution Vulnerability (MS08-052)
  D. HTTP TRACE / TRACK Methods Allowed (002-1208)
  E. SSL Certificate Expiry
  E. SSL Certificate Expiry

• Question 164:

  During a tabletop exercise, it is determined that a security analyst is required to ensure patching and scan reports are available during an incident, as well as documentation of all critical systems. To which of the following stakeholders should the analyst provide the reports?

  A. Management
  B. Affected vendors
  C. Security operations
  D. Legal
  A. Management

• Question 165:

  Due to new regulations, a company has decided to institute an organizational vulnerability management program and assign the function to the security team. Which of the following frameworks would BEST support the program? (Select two.)

  A. COBIT
  B. NIST
  C. ISO 27000 series
  D. ITIL
  E. OWASP
  B. NIST
  D. ITIL

• Question 166:

  A cybersecurity professional wants to determine if a web server is running on a remote host with the IP address 192.168.1.100. Which of the following can be used to perform this task?

  A. nc 192.168.1.100 -1 80
  B. ps aux 192.168.1.100
  C. nmap 192.168.1.100 –p 80 –A
  D. dig www 192.168.1.100
  E. ping –p 80 192.168.1.100
  C. nmap 192.168.1.100 –p 80 –A

• Question 167:

  An organization uses Common Vulnerability Scoring System (CVSS) scores to prioritize remediation of vulnerabilities.

  Management wants to modify the priorities based on a difficulty factor so that vulnerabilities with lower CVSS scores may get a higher priority if they are easier to implement with less risk to system functionality. Management also wants to quantify the priority. Which of the following would achieve management's objective?

  A. (CVSS Score) * Difficulty = Priority Where Difficulty is a range from 0.1 to 1.0 with 1.0 being easiest and lowest risk to implement
  B. (CVSS Score) * Difficulty = Priority Where Difficulty is a range from 1 to 5 with 1 being easiest and lowest risk to implement
  C. (CVSS Score) / Difficulty = Priority Where Difficulty is a range from 1 to 10 with 10 being easiest and lowest risk to implement
  D. ((CVSS Score) * 2) / Difficulty = Priority Where CVSS Score is weighted and Difficulty is a range from 1 to 5 with 5 being easiest and lowest risk to implement
  C. (CVSS Score) / Difficulty = Priority Where Difficulty is a range from 1 to 10 with 10 being easiest and lowest risk to implement

• Question 168:

  After completing a vulnerability scan, the following output was noted:

  

  Which of the following vulnerabilities has been identified?

  A. PKI transfer vulnerability.
  B. Active Directory encryption vulnerability.
  C. Web application cryptography vulnerability.
  D. VPN tunnel vulnerability.
  C. Web application cryptography vulnerability.

• Question 169:

  The security configuration management policy states that all patches must undergo testing procedures before being moved into production. The security analyst notices a single web application server has been downloading and applying patches during non-business hours without testing. There are no apparent adverse reactions, server functionality does not seem to be affected, and no malware was found after a scan.

  Which of the following actions should the analyst take?

  A. Reschedule the automated patching to occur during business hours.
  B. Monitor the web application service for abnormal bandwidth consumption.
  C. Create an incident ticket for anomalous activity.
  D. Monitor the web application for service interruptions caused from the patching.
  C. Create an incident ticket for anomalous activity.

• Question 170:

  An analyst is reviewing the following log from the company web server:

  

  Which of the following is this an example of?

  A. Online rainbow table attack
  B. Offline brute force attack
  C. Offline dictionary attack
  D. Online hybrid attack
  B. Offline brute force attack