CompTIA CS0-001 Online Practice Questions and Exam Preparation

CompTIA CS0-001 Online Questions & Answers

• Question 31:

  Which of the following represent the reasoning behind careful selection of the timelines and time-of-day boundaries for an authorized penetration test? (Select TWO).

  A. To schedule personnel resources required for test activities
  B. To determine frequency of team communication and reporting
  C. To mitigate unintended impacts to operations
  D. To avoid conflicts with real intrusions that may occur
  E. To ensure tests have measurable impact to operations
  A. To schedule personnel resources required for test activities
  C. To mitigate unintended impacts to operations

• Question 32:

  A security administrator needs to create an IDS rule to alert on FTP login attempts by root. Which of the following rules is the BEST solution?

  

  A. Option A
  B. Option B
  C. Option C
  D. Option D
  B. Option B

• Question 33:

  A technician receives the following security alert from the firewall's automated system: After reviewing the alert, which of the following is the BEST analysis?

  

  A. This alert is a false positive because DNS is a normal network function.
  B. This alert indicates a user was attempting to bypass security measures using dynamic DNS.
  C. This alert was generated by the SIEM because the user attempted too many invalid login attempts.
  D. This alert indicates an endpoint may be infected and is potentially contacting a suspect host.
  D. This alert indicates an endpoint may be infected and is potentially contacting a suspect host.

• Question 34:

  A cybersecurity analyst has been asked to follow a corporate process that will be used to manage vulnerabilities for an organization. The analyst notices the policy has not been updated in three years. Which of the following should the analyst check to ensure the policy is still accurate?

  A. Threat intelligence reports
  B. Technical constraints
  C. Corporate minutes
  D. Governing regulations
  A. Threat intelligence reports

• Question 35:

  Which of the following is a technology used to provide Internet access to internal associates without exposing the Internet directly to the associates?

  A. Fuzzer
  B. Vulnerability scanner
  C. Web proxy
  D. Intrusion prevention system
  C. Web proxy

• Question 36:

  After scanning the main company's website with the OWASP ZAP tool, a cybersecurity analyst is reviewing the following warning:

  

  The analyst reviews a snippet of the offending code:

  

  Which of the following is the BEST course of action based on the above warning and code snippet?

  A. The analyst should implement a scanner exception for the false positive.
  B. The system administrator should disable SSL and implement TLS.
  C. The developer should review the code and implement a code fix.
  D. The organization should update the browser GPO to resolve the issue.
  D. The organization should update the browser GPO to resolve the issue.

• Question 37:

  Which of the following are essential components within the rules of engagement for a penetration test? (Select TWO).

  A. Schedule
  B. Authorization
  C. List of system administrators
  D. Payment terms E. Business justification
  A. Schedule
  B. Authorization

• Question 38:

  An application development company released a new version of its software to the public. A few days after the release, the company is notified by end users that the application is notably slower, and older security bugs have reappeared in the new release. The development team has decided to include the security analyst during their next development cycle to help address the reported issues. Which of the following should the security analyst focus on to remedy the existing reported problems?

  A. The security analyst should perform security regression testing during each application development cycle.
  B. The security analyst should perform end user acceptance security testing during each application development cycle.
  C. The security analyst should perform secure coding practices during each application development cycle.
  D. The security analyst should perform application fuzzing to locate application vulnerabilities during each application development cycle.
  A. The security analyst should perform security regression testing during each application development cycle.

• Question 39:

  A security analyst is conducting traffic analysis following a potential web server breach. The analyst wants to investigate client-side server errors.

  

  Which of the following lines of this query output should be investigated further?

  A. 1
  B. 2
  C. 3
  D. 4
  C. 3

• Question 40:

  Management is concerned with administrator access from outside the network to a key server in the company. Specifically, firewall rules allow access to the server from anywhere in the company. Which of the following would be an effective solution?

  A. Honeypot
  B. Jump box
  C. Server hardening
  D. Anti-malware
  B. Jump box