CompTIA CS0-002 Online Practice Questions and Exam Preparation

CompTIA CS0-002 Online Questions & Answers

• Question 991:

  Which of the following ICS network protocols has no inherent security functions on TCP port 502?

  A. CIP
  B. DHCP
  C. SSH
  D. Modbus
  D. Modbus

• Question 992:

  A security analyst notices the following entry while reviewing the server togs

  OR 1=1' ADD USER attacker' PW 1337password' ---

  Which of the following events occurred?

  A. CSRF
  B. XSS
  C. SQLi
  D. RCE
  C. SQLi

• Question 993:

  A security analyst identified one server that was compromised and used as a data making machine, and a few of the hard drive that was created. Which of the following will MOST likely provide information about when and how the machine was compromised and where the malware is located?

  A. System timeline reconstruction
  B. System registry extraction
  C. Data carving
  D. Volatile memory analysts
  A. System timeline reconstruction

• Question 994:

  A company stores all of its data in the cloud. All company-owned laptops are currently unmanaged, and all users have administrative rights. The security team is having difficulty identifying a way to secure the environment. Which of the following would be the BEST method to protect the company's data?

  A. Implement UEM on an systems and deploy security software.
  B. Implement DLP on all workstations and block company data from being sent outside the company
  C. Implement a CASB and prevent certain types of data from being downloaded to a workstation
  D. Implement centralized monitoring and logging for an company systems.
  C. Implement a CASB and prevent certain types of data from being downloaded to a workstation

• Question 995:

  A security analyst is reviewing the following server statistics: Which of the following Is MOST likely occurring?

  

  A. Race condition
  B. Privilege escalation
  C. Resource exhaustion
  D. VM escape
  C. Resource exhaustion

• Question 996:

  In reviewing firewall logs, a security analyst has discovered the following IP address, which several employees are using frequently:

  The organization's servers use IP addresses in the 192.168.0.1/24 CIDR. Additionally, the analyst has noticed that corporate data is being stored at this new location. A few of these employees are on the management and executive management teams. The analyst has also discovered that there is no record of this IP address or service in reviewing the known locations of managing system assets. Which of the following is occurring in this scenario?

  A. Malicious process
  B. Unauthorized change
  C. Data exfiltration
  D. Unauthorized access
  C. Data exfiltration

• Question 997:

  A cybersecurity analyst has been asked to follow a corporate process that will be used to manage vulnerabilities for an organization. The analyst notices the policy has not been updated in three years. Which of the following should the analyst check to ensure the policy is still accurate?

  A. Threat intelligence reports
  B. Technical constraints
  C. Corporate minutes
  D. Governing regulations
  A. Threat intelligence reports

• Question 998:

  A cybersecurity analyst is establishing a threat hunting and intelligence group at a growing organization. Which of the following is a collaborative resource that would MOST likely be used for this purpose?

  A. Scrum
  B. loC feeds
  C. ISAC
  D. VSS scores
  C. ISAC

• Question 999:

  A vulnerability scanner has identified an out-of-support database software version running on a server. The software update will take six to nine months to complete. The management team has agreed to a one-year extended support contract with the software vendor. Which of the following BEST describes the risk treatment in this scenario?

  A. The extended support mitigates any risk associated with the software.
  B. The extended support contract changes this vulnerability finding to a false positive.
  C. The company is transferring the risk for the vulnerability to the software vendor.
  D. The company is accepting the inherent risk of the vulnerability.
  D. The company is accepting the inherent risk of the vulnerability.

• Question 1000:

  The help desk is having difficulty keeping up with all onboarding and offboarding requests. Managers often submit, requests for new users at the last minute. causing the help desk to scramble to create accounts across many different Interconnected systems. Which of the following solutions would work BEST to assist the help desk with the onboarding and offboarding process while protecting the company's assets?

  A. MFA
  B. CASB
  C. SSO
  D. RBAC
  D. RBAC