CompTIA CS0-001 Online Practice Questions and Exam Preparation

CompTIA CS0-001 Online Questions & Answers

• Question 321:

  Which of the following stakeholders would need to be aware of an e-discovery notice received by the security office about an ongoing case within the manufacturing department?

  A. Board of trustees
  B. Human resources
  C. Legal
  D. Marketing
  C. Legal

• Question 322:

  Review the following results: Which of the following has occurred?

  

  A. This is normal network traffic.
  B. 123.120.110.212 is infected with a Trojan.
  C. 172.29.0.109 is infected with a worm.
  D. 172.29.0.109 is infected with a Trojan.
  A. This is normal network traffic.

• Question 323:

  An analyst was testing the latest version of an internally developed CRM system. The analyst created a basic user account. Using a few tools in Kali's latest distribution, the analyst was able to access configuration files, change permissions on folders and groups, and delete and create new system objects. Which of the following techniques did the analyst use to perform these unauthorized activities?

  A. Impersonation
  B. Privilege escalation
  C. Directory traversal
  D. Input injection
  C. Directory traversal

• Question 324:

  A company is developing its first mobile application, which will be distributed via the official application stores of the two major mobile platforms. Which of the following is a prerequisite to making the applications available in the application stores?

  A. Distribute user certificates.
  B. Deploy machine/computer certificates.
  C. Obtain a code-signing certificate.
  D. Implement a CRL.
  B. Deploy machine/computer certificates.

• Question 325:

  A cybersecurity analyst traced the source of an attack to compromised user credentials. Log analysis revealed that the attacker successfully authenticated from an unauthorized foreign country. Management asked the security analyst to research and implement a solution to help mitigate attacks based on compromised passwords. Which of the following should the analyst implement?

  A. Self-service password reset
  B. Single sign-on
  C. Context-based authentication
  D. Password complexity
  C. Context-based authentication

• Question 326:

  In order to leverage the power of data correlation within Nessus, a cybersecurity analyst needs to write an SQL statement that will provide how long a vulnerability has been present on the network. Given the following output table:

  

  Which of the following SQL statements would provide the resulted output needed for this correlation?

  A. SELECT Port, ScanDate, IP, PlugIn FROM MyResults WHERE PluginID=`1000'
  B. SELECT ScanDate, IP, Port, PlugIn FROM MyResults WHERE PluginID=`1000'
  C. SELECT IP, PORT, PlugIn, ScanDate FROM MyResults SET PluginID=`1000'
  D. SELECT ScanDate, IP, Port, PlugIn SET MyResults WHERE PluginID=`1000'
  B. SELECT ScanDate, IP, Port, PlugIn FROM MyResults WHERE PluginID=`1000'

• Question 327:

  A web application has a newly discovered vulnerability in the authentication method used to validate known company users. The user ID of Admin with a password of "password" grants elevated access to the application over the Internet. Which of the following is the BEST method to discover the vulnerability before a production deployment?

  A. Manual peer review
  B. User acceptance testing
  C. Input validation
  D. Stress test the application
  C. Input validation

• Question 328:

  Which of the following could be directly impacted by an unpatched vulnerability in vSphere ESXi?

  A. The organization's physical routers
  B. The organization's mobile devices
  C. The organization's virtual infrastructure
  D. The organization's VPN
  C. The organization's virtual infrastructure

• Question 329:

  A cybersecurity analyst has several SIEM event logs to review for possible APT activity. The analyst was given several items that include lists of indicators for both IP addresses and domains. Which of the following actions is the BEST approach for the analyst to perform?

  A. Use the IP addresses to search through the event logs.
  B. Analyze the trends of the events while manually reviewing to see if any of the indicators match.
  C. Create an advanced query that includes all of the indicators, and review any of the matches.
  D. Scan for vulnerabilities with exploits known to have been used by an APT.
  B. Analyze the trends of the events while manually reviewing to see if any of the indicators match.

• Question 330:

  File integrity monitoring states the following files have been changed without a written request or approved change. The following change has been made:

  chmod 777 -Rv /usr

  Which of the following may be occurring?

  A. The ownership pf /usr has been changed to the current user.
  B. Administrative functions have been locked from users.
  C. Administrative commands have been made world readable/writable.
  D. The ownership of/usr has been changed to the root user.
  C. Administrative commands have been made world readable/writable.