CompTIA CS0-001 Online Practice Questions and Exam Preparation

CompTIA CS0-001 Online Questions & Answers

• Question 61:

  A security analyst discovers a network intrusion and quickly solves the problem by closing an unused port. Which of the following should be completed?

  A. Vulnerability report
  B. Memorandum of agreement
  C. Reverse-engineering incident report
  D. Lessons learned report
  D. Lessons learned report

• Question 62:

  Creating an isolated environment in order to test and observe the behavior of unknown software is also known as:

  A. sniffing
  B. hardening
  C. hashing
  D. sandboxing
  D. sandboxing

• Question 63:

  A cybersecurity analyst is currently using Nessus to scan several FTP servers. Upon receiving the results of the scan, the analyst needs to further test to verify that the vulnerability found exists. The analyst uses the following snippet of code:

  

  Which of the following vulnerabilities is the analyst checking for?

  A. Buffer overflow
  B. SQL injection
  C. Default passwords
  D. Format string attack
  B. SQL injection

• Question 64:

  A security analyst is concerned that employees may attempt to exfiltrate data prior to tendering their resignations. Unfortunately, the company cannot afford to purchase a data loss prevention (DLP) system. Which of the following recommendations should the security analyst make to provide defense-in-depth against data loss? (Select THREE).

  A. Prevent users from accessing personal email and file-sharing sites via web proxy
  B. Prevent flash drives from connecting to USB ports using Group Policy
  C. Prevent users from copying data from workstation to workstation
  D. Prevent users from using roaming profiles when changing workstations
  E. Prevent Internet access on laptops unless connected to the network in the office or via VPN
  F. Prevent users from being able to use the copy and paste functions
  A. Prevent users from accessing personal email and file-sharing sites via web proxy
  B. Prevent flash drives from connecting to USB ports using Group Policy
  E. Prevent Internet access on laptops unless connected to the network in the office or via VPN

• Question 65:

  A security analyst, who is working for a company that utilizes Linux servers, receives the following results from a vulnerability scan:

  

  Which of the following is MOST likely a false positive?

  A. ICMP timestamp request remote date disclosure
  B. Windows SMB service enumeration via \srvsvc
  C. Anonymous FTP enabled
  D. Unsupported web server detection
  B. Windows SMB service enumeration via \srvsvc

• Question 66:

  An executive tasked a security analyst to aggregate past logs, traffic, and alerts on a particular attack vector. The analyst was then tasked with analyzing the data and making predictions on future complications regarding this attack vector. Which of the following types of analysis is the security analyst MOST likely conducting?

  A. Trend analysis
  B. Behavior analysis
  C. Availability analysis
  D. Business analysis
  A. Trend analysis

• Question 67:

  The director of software development is concerned with recent web application security incidents, including the successful breach of a back-end database server. The director would like to work with the security team to implement a standardized way to design, build, and test web applications and the services that support them. Which of the following meets the criteria?

  A. OWASP
  B. SANS
  C. PHP
  D. Ajax
  A. OWASP

• Question 68:

  A company just chose a global software company based in Europe to implement a new supply chain management solution. Which of the following would be the MAIN concern of the company?

  A. Violating national security policy
  B. Packet injection
  C. Loss of intellectual property
  D. International labor laws
  A. Violating national security policy

• Question 69:

  Given the following log snippet:

  

  Which of the following describes the events that have occurred?

  A. An attempt to make an SSH connection from "superman" was done using a password.
  B. An attempt to make an SSH connection from 192.168.1.166 was done using PKI.
  C. An attempt to make an SSH connection from outside the network was done using PKI.
  D. An attempt to make an SSH connection from an unknown IP address was done using a password.
  B. An attempt to make an SSH connection from 192.168.1.166 was done using PKI.

• Question 70:

  Creating a lessons learned report following an incident will help an analyst to communicate which of the following information? (Select TWO)

  A. Root cause analysis of the incident and the impact it had on the organization
  B. Outline of the detailed reverse engineering steps for management to review
  C. Performance data from the impacted servers and endpoints to report to management
  D. Enhancements to the policies and practices that will improve business responses
  E. List of IP addresses, applications, and assets
  A. Root cause analysis of the incident and the impact it had on the organization
  D. Enhancements to the policies and practices that will improve business responses