CompTIA CS0-001 Online Practice Questions and Exam Preparation

CompTIA CS0-001 Online Questions & Answers

• Question 281:

  An analyst is preparing for a technical security compliance check on all Apache servers. Which of the following will be the BEST to use?

  A. CIS benchmark
  B. Nagios
  C. OWASP
  D. Untidy
  E. Cain and Abel
  A. CIS benchmark

• Question 282:

  During which of the following NIST risk management framework steps would an information system security engineer identify inherited security controls and tailor those controls to the system?

  A. Categorize
  B. Select
  C. Implement
  D. Assess
  B. Select

• Question 283:

  During a physical penetration test at a client site, a local law enforcement officer stumbled upon the test questioned the legitimacy of the team. Which of the following information should be shown to the officer?

  A. Letter of engagement
  B. Scope of work
  C. Timing information
  D. Team reporting
  A. Letter of engagement

• Question 284:

  A cybersecurity analyst is currently investigating a server outage. The analyst has discovered the following value was entered for the username: 0xbfff601a. Which of the following attacks may be occurring?

  A. Buffer overflow attack
  B. Man-in-the-middle attack
  C. Smurf attack
  D. Format string attack
  E. Denial of service attack
  D. Format string attack

• Question 285:

  A university wants to increase the security posture of its network by implementing vulnerability scans of both centrally managed and student/employee laptops. The solution should be able to scale, provide minimum false positives and high accuracy of results, and be centrally managed through an enterprise console. Which of the following scanning topologies is BEST suited for this environment?

  A. A passive scanning engine located at the core of the network infrastructure
  B. A combination of cloud-based and server-based scanning engines
  C. A combination of server-based and agent-based scanning engines
  D. An active scanning engine installed on the enterprise console
  D. An active scanning engine installed on the enterprise console

• Question 286:

  A corporation employs a number of small-form-factor workstations and mobile devices, and an incident response team is therefore required to build a forensics kit with tools to support chip-off analysis. Which of the following tools would BEST meet this requirement?

  A. JTAG adapters
  B. Last-level cache readers
  C. Write-blockers
  D. ZIF adapters
  A. JTAG adapters

• Question 287:

  A retail corporation with widely distributed store locations and IP space must meet PCI requirements relating to vulnerability scanning. The organization plans to outsource this function to a third party to reduce costs. Which of the following should be used to communicate expectations related to the execution of scans?

  A. Vulnerability assessment report
  B. Lessons learned documentation
  C. SLA
  D. MOU
  C. SLA

• Question 288:

  A company's asset management software has been discovering a weekly increase in non-standard software installed on end users' machines with duplicate license keys. The security analyst wants to know if any of this software is listening on any non-standard ports, such as 6667. Which of the following tools should the analyst recommend to block any command and control traffic?

  A. Netstat
  B. NIDS
  C. IPS
  D. HIDS
  C. IPS

• Question 289:

  A malware infection spread to numerous workstations within the marketing department. The workstations were quarantined and replaced with machines. Which of the following represents a FINAL step in the eradication of the malware?

  A. The workstations should be isolated from the network.
  B. The workstations should be donated for reuse.
  C. The workstations should be reimaged.
  D. The workstations should be patched and scanned.
  D. The workstations should be patched and scanned.

• Question 290:

  A reverse engineer was analyzing malware found on a retailer's network and found code extracting track data in memory. Which of the following threats did the engineer MOST likely uncover?

  A. POS malware
  B. Rootkit
  C. Key logger
  D. Ransomware
  A. POS malware