CompTIA CS0-001 Online Practice Questions and Exam Preparation

CompTIA CS0-001 Online Questions & Answers

• Question 271:

  Which of the following policies BEST explains the purpose of a data ownership policy?

  A. The policy should describe the roles and responsibilities between users and managers, and the management of specific data types.
  B. The policy should establish the protocol for retaining information types based on regulatory or business needs.
  C. The policy should document practices that users must adhere to in order to access data on the corporate network or Internet.
  D. The policy should outline the organization's administration of accounts for authorized users to access the appropriate data.
  D. The policy should outline the organization's administration of accounts for authorized users to access the appropriate data.

• Question 272:

  Following a data compromise, a cybersecurity analyst noticed the following executed query:

  SELECT * from Users WHERE name = rick OR 1=1

  Which of the following attacks occurred, and which of the following technical security controls would BEST reduce the risk of future impact from this attack? (Select TWO).

  A. Cookie encryption
  B. XSS attack
  C. Parameter validation
  D. Character blacklist
  E. Malicious code execution
  F. SQL injection
  C. Parameter validation
  F. SQL injection

• Question 273:

  Which of the following should be found within an organization's acceptable use policy?

  A. Passwords must be eight characters in length and contain at least one special character.
  B. Customer data must be handled properly, stored on company servers, and encrypted when possible
  C. Administrator accounts must be audited monthly, and inactive accounts should be removed.
  D. Consequences of violating the policy could include discipline up to and including termination.
  D. Consequences of violating the policy could include discipline up to and including termination.

• Question 274:

  A security professional is analyzing the results of a network utilization report. The report includes the following information:

  

  Which of the following servers needs further investigation?

  A. hr.dbprod.01
  B. RandD.file.srvr.01
  C. mrktg.file.srvr.02
  D. web.srvr.03
  A. hr.dbprod.01

• Question 275:

  During an investigation, a computer is being seized. Which of the following is the FIRST step the analyst should take?

  A. Power off the computer and remove it from the network.
  B. Unplug the network cable and take screenshots of the desktop.
  C. Perform a physical hard disk image.
  D. Initiate chain-of-custody documentation.
  A. Power off the computer and remove it from the network.

• Question 276:

  A software patch has been released to remove vulnerabilities from company's software. A security analyst has been tasked with testing the software to ensure the vulnerabilities have been remediated and the application is still functioning properly. Which of the following tests should be performed NEXT?

  A. Fuzzing
  B. User acceptance testing
  C. Regression testing
  D. Penetration testing
  C. Regression testing

• Question 277:

  A hacker issued a command and received the following response:

  

  Which of the following describes what the hacker is attempting?

  A. Penetrating the system
  B. Performing a zombie scan
  C. OS fingerprinting
  D. Topology discovery
  A. Penetrating the system

• Question 278:

  Joe, a penetration tester, used a professional directory to identify a network administrator and ID administrator for a client's company. Joe then emailed the network administrator, identifying himself as the ID administrator, and asked for a current password as part of a security exercise. Which of the following techniques were used in this scenario?

  A. Enumeration and OS fingerprinting
  B. Email harvesting and host scanning
  C. Social media profiling and phishing
  D. Network and host scanning
  C. Social media profiling and phishing

• Question 279:

  A security analyst is performing ongoing scanning and continuous monitoring of the corporate datacenter. Over time, these scans are repeatedly showing susceptibility to the same vulnerabilities and an increase in new vulnerabilities on a specific group of servers that are clustered to run the same application. Which of the following vulnerability management processes should be implemented?

  A. Frequent server scanning
  B. Automated report generation
  C. Group policy modification
  D. Regular patch application
  D. Regular patch application

• Question 280:

  A security analyst was asked to join an outage call for a critical web application. The web middleware support team determined the web server is running and having no trouble processing requests; however, some investigation has revealed firewall denies to the web server that began around 1.00 a.m. that morning. An emergency change was made to enable the access, but management has asked for a root cause determination. Which of the following would be the BEST next step?

  A. Install a packet analyzer near the web server to capture sample traffic to find anomalies.
  B. Block all traffic to the web server with an ACL.
  C. Use a port scanner to determine all listening ports on the web server.
  D. Search the logging servers for any rule changes.
  D. Search the logging servers for any rule changes.