CompTIA CS0-002 Online Practice Questions and Exam Preparation

CompTIA CS0-002 Online Questions & Answers

• Question 131:

  Which of the following describes why it is important for an organization's incident response team and legal department to meet and discuss communication processes during the incident response process?

  A. To comply with existing organization policies and procedures on interacting with internal and external parties
  B. To ensure all parties know their roles and effective lines of communication are established
  C. To identify which group will communicate details to law enforcement in the event of a security incident
  D. To predetermine what details should or should not be shared with internal or external parties in the event of an incident
  A. To comply with existing organization policies and procedures on interacting with internal and external parties

• Question 132:

  Which of the following is MOST effective for correlation analysis by log for threat management?

  A. PCAP
  B. SCAP
  C. IPS
  D. SIEM
  D. SIEM

• Question 133:

  A security analyst is concerned that a third-party application may have access to user passwords during authentication. Which of the following protocols should the application use to alleviate the analyst's concern?

  A. LDAPS
  B. MFA
  C. SAML
  D. SHA-1
  C. SAML

  ---

  Explanation/Reference:

  Reference: https://www.varonis.com/blog/what-is-saml

• Question 134:

  An organization uses Common Vulnerability Scoring System (CVSS) scores to prioritize remediation of vulnerabilities.

  Management wants to modify the priorities based on a difficulty factor so that vulnerabilities with lower CVSS scores may get a higher priority if they are easier to implement with less risk to system functionality. Management also wants to quantify the priority. Which of the following would achieve management's objective?

  A. (CVSS Score) * Difficulty = Priority Where Difficulty is a range from 0.1 to 1.0 with 1.0 being easiest and lowest risk to implement
  B. (CVSS Score) * Difficulty = Priority Where Difficulty is a range from 1 to 5 with 1 being easiest and lowest risk to implement
  C. (CVSS Score) / Difficulty = Priority Where Difficulty is a range from 1 to 10 with 10 being easiest and lowest risk to implement
  D. ((CVSS Score) * 2) / Difficulty = Priority Where CVSS Score is weighted and Difficulty is a range from 1 to 5 with 5 being easiest and lowest risk to implement
  C. (CVSS Score) / Difficulty = Priority Where Difficulty is a range from 1 to 10 with 10 being easiest and lowest risk to implement

• Question 135:

  During the security assessment of a new application, a tester attempts to log in to the application but receives the following message incorrect password for given username. Which of the following can the tester recommend to decrease the likelihood that a malicious attacker will receive helpful information?

  A. Set the web page to redirect to an application support page when a bad password is entered.
  B. Disable error messaging for authentication
  C. Recognize that error messaging does not provide confirmation of the correct element of authentication
  D. Avoid using password-based authentication for the application
  B. Disable error messaging for authentication

• Question 136:

  A security analyst needs to acquire evidence by cloning hard drives, which will then be acquired by a third-party forensic lab. The security analyst is concerned about modifying evidence on the hard drives. Which of the following should be the NEXT step to preserve the evidence?

  A. Apply encryption over the data during the evidence collection process.
  B. Create a file hash of the drive images and clones.
  C. Use an encrypted USB stick to transfer the data from the hard drives.
  D. Initiate a chain of custody document and ask the data owner to sign it.
  D. Initiate a chain of custody document and ask the data owner to sign it.

• Question 137:

  A web developer wants to create a new web part within the company website that aggregates sales from individual team sites. A cybersecurity analyst wants to ensure security measurements are implemented during this process. Which of the following remediation actions should the analyst take to implement a vulnerability management process?

  A. Personnel training
  B. Vulnerability scan
  C. Change management
  D. Sandboxing
  C. Change management

• Question 138:

  A security analyst needs to recommend a solution that will allow users at a company to access cloud-based SaaS services but also prevent them from uploading and exfiltrating data. Which of the following solutions should the security analyst recommend?

  A. CASB
  B. MFA
  C. VPN
  D. VPS E. DLP
  E

• Question 139:

  The IT department at a growing law firm wants to begin using a third-party vendor for vulnerability monitoring and mitigation. The executive director of the law firm wishes to outline the assumptions and expectations between the two companies. Which of the following documents might be referenced in the event of a security breach at the law firm?

  A. SLA
  B. MOU
  C. SOW
  D. NDA
  A. SLA

• Question 140:

  A corporation has implemented an 802.1X wireless network using self-signed certificates. Which of the following represents a risk to wireless users?

  A. Buffer overflow attacks
  B. Cross-site scripting attacks
  C. Man-in-the-middle attacks
  D. Denial of service attacks
  C. Man-in-the-middle attacks