CompTIA CS0-001 Online Practice Questions and Exam Preparation

CompTIA CS0-001 Online Questions & Answers

• Question 411:

  External users are reporting that a web application is slow and frequently times out when attempting to submit information. Which of the following software development best practices would have helped prevent this issue?

  A. Stress testing
  B. Regression testing
  C. Input validation
  D. Fuzzing
  A. Stress testing

• Question 412:

  A security analyst is performing a stealth black-box audit of the local WiFi network and is running a wireless sniffer to capture local WiFi network traffic from a specific wireless access point. The SSID is not appearing in the sniffing logs of the local wireless network traffic. Which of the following is the best action that should be performed NEXT to determine the SSID?

  A. Set up a fake wireless access point
  B. Power down the wireless access point
  C. Deauthorize users of that access point
  D. Spoof the MAC addresses of adjacent access points
  A. Set up a fake wireless access point

• Question 413:

  A system's authority to operate (ATO) is set to expire in four days. Because of other activities and limited staffing, the organization has neglected to start reauthentication activities until now. The cybersecurity group just performed a vulnerability scan with the partial set of results shown below:

  

  Based on the scenario and the output from the vulnerability scan, which of the following should the security team do with this finding?

  A. Remediate by going to the web config file, searching for the enforce HTTP validation setting, and manually updating to the correct setting.
  B. Accept this risk for now because this is a "high" severity, but testing will require more than the four days available, and the system ATO needs to be competed.
  C. Ignore it. This is false positive, and the organization needs to focus its efforts on other findings.
  D. Ensure HTTP validation is enabled by rebooting the server.
  A. Remediate by going to the web config file, searching for the enforce HTTP validation setting, and manually updating to the correct setting.

• Question 414:

  An organization is requesting the development of a disaster recovery plan. The organization has grown and so has its infrastructure. Documentation, policies, and procedures do not exist. Which of the following steps should be taken to assist in the development of the disaster recovery plan?

  A. Conduct a risk assessment.
  B. Develop a data retention policy.
  C. Execute vulnerability scanning.
  D. Identify assets.
  D. Identify assets.

• Question 415:

  An organization suspects it has had a breach, and it is trying to determine the potential impact. The organization knows the following:

  The source of the breach is linked to an IP located in a foreign country.

  The breach is isolated to the research and development servers.

  The hash values of the data before and after the breach are unchanged.

  The affected servers were regularly patched, and a recent scan showed no vulnerabilities.

  Which of the following conclusions can be drawn with respect to the threat and impact? (Choose two.)

  A. The confidentiality of the data is unaffected.
  B. The threat is an APT.
  C. The source IP of the threat has been spoofed.
  D. The integrity of the data is unaffected.
  E. The threat is an insider.
  B. The threat is an APT.
  D. The integrity of the data is unaffected.

• Question 416:

  A staff member reported that a laptop has degraded performance. The security analyst has investigated the issue and discovered that CPU utilization, memory utilization, and outbound network traffic are consuming the laptop's resources. Which of the following is the BEST course of actions to resolve the problem?

  A. Identify and remove malicious processes.
  B. Disable scheduled tasks.
  C. Suspend virus scan.
  D. Increase laptop memory.
  E. Ensure the laptop OS is properly patched.
  A. Identify and remove malicious processes.