CompTIA CS0-002 Online Practice Questions and Exam Preparation

CompTIA CS0-002 Online Questions & Answers

• Question 111:

  A company wants to reduce the cost of deploying servers to support increased network growth. The company is currently unable to keep up with the demand, so it wants to outsource the infrastructure to a cloud-based solution.

  Which of the following is the GREATEST threat for the company to consider when outsourcing its infrastructure?

  A. The cloud service provider is unable to provide sufficient logging and monitoring.
  B. The cloud service provider is unable to issue sufficient documentation for configurations.
  C. The cloud service provider conducts a system backup each weekend and once a week during peak business times.
  D. The cloud service provider has an SLA for system uptime that is lower than 99 9%.
  B. The cloud service provider is unable to issue sufficient documentation for configurations.

• Question 112:

  A company's security team recently discovered a number of workstations that are at the end of life. The workstation vendor informs the team that the product is no longer supported and patches are no longer available The company is not prepared to cease its use of these workstations.

  Which of the following would be the BEST method to protect these workstations from threats?

  A. Deploy whitelisting to the identified workstations to limit the attack surface
  B. Determine the system process cntcalrty and document it
  C. Isolate the workstations and air gap them when it is feasible
  D. Increase security monitoring on the workstations
  C. Isolate the workstations and air gap them when it is feasible

• Question 113:

  White reviewing incident reports from the previous night, a security analyst notices the corporate websites were defaced with po mcai propaganda. Which of the following BEST Describes this type of actor?

  A. Hacktivist
  B. Nation-state
  C. insider threat
  D. Organized crime
  A. Hacktivist

• Question 114:

  An organization has not had an incident for several months. The Chief Information Security Officer (CISO) wants to move to a more proactive stance for security investigations. Which of the following would BEST meet that goal?

  A. Root-cause analysis
  B. Active response
  C. Advanced antivirus
  D. Information-sharing community
  E. Threat hunting
  E. Threat hunting

• Question 115:

  Which of the following assessment methods should be used to analyze how specialized software performs during heavy loads?

  A. Stress test
  B. API compatibility lest
  C. Code review
  D. User acceptance test
  E. Input validation
  A. Stress test

• Question 116:

  A company wants to ensure confidential data from its storage media files is sanitized so the drives cannot oe reused. Which of the following is the BEST approach?

  A. Degaussing
  B. Shreoding
  C. Formatting
  D. Encrypting
  B. Shreoding

• Question 117:

  An analyst is reviewing the output from some recent network enumeration activities. The following entry relates to a target on the network:

  

  Based on the above output, which Of the following tools or techniques is MOST likely being used?

  A. Web application firewall
  B. Port triggering
  C. Intrusion prevention system
  D. Port isolation
  E. Port address translation
  A. Web application firewall

  ---

  Explanation/Reference:

  Filezilla ftpd and Microsoft IIS httpd 7.5 are running on ports 21 and 80, respectively.

• Question 118:

  A contained section of a building is unable to connect to the Internet A security analyst. A security analyst investigates me issue but does not see any connections to the corporate web proxy However the analyst does notice a small spike in traffic to the Internet. The help desk technician verifies all users are connected to the connect SSID. but there are two of the same SSIDs listed in the network connections. Which of the following BEST describes what is occurring?

  A. Bandwidth consumption
  B. Denial of service
  C. Beaconing
  D. Rogue device on the network
  A. Bandwidth consumption

• Question 119:

  After implementing and running an automated patching tool, a security administrator ran a vulnerability scan that reported no missing patches found. Which of the following BEST describes why this tool was used?

  A. To create a chain of evidence to demonstrate when the servers were patched.
  B. To harden the servers against new attacks.
  C. To provide validation that the remediation was active.
  D. To generate log data for unreleased patches.
  B. To harden the servers against new attacks.

• Question 120:

  Several accounting department users are reporting unusual Internet traffic in the browsing history of their workstations after returning to work and logging in. The building security team informs the IT security team that the cleaning staff was caught using the systems after the accounting department users left for the day. Which of the following steps should the IT security team take to help prevent this from happening again? (Choose two.)

  A. Install a web monitor application to track Internet usage after hours.
  B. Configure a policy for workstation account timeout at three minutes.
  C. Configure NAC to set time-based restrictions on the accounting group to normal business hours.
  D. Configure mandatory access controls to allow only accounting department users to access the workstations.
  E. Set up a camera to monitor the workstations for unauthorized use.
  B. Configure a policy for workstation account timeout at three minutes.
  C. Configure NAC to set time-based restrictions on the accounting group to normal business hours.