CompTIA CS0-002 Online Practice Questions and Exam Preparation

CompTIA CS0-002 Online Questions & Answers

• Question 211:

  A cybersecurity analyst is concerned about attacks that use advanced evasion techniques. Which of the following would best mitigate such attacks?

  A. Keeping IPS rules up to date
  B. Installing a proxy server
  C. Applying network segmentation
  D. Updating the antivirus software
  A. Keeping IPS rules up to date

• Question 212:

  A routine vulnerability scan detected a known vulnerability in a critical enterprise web application. Which of the following would be the BEST next step?

  A. Submit a change request to have the system patched
  B. Evaluate the risk and criticality to determine it further action is necessary
  C. Notify a manager of the breach and initiate emergency procedures.
  D. Remove the application from production and Inform the users.
  B. Evaluate the risk and criticality to determine it further action is necessary

• Question 213:

  The computer incident response team at a multinational company has determined that a breach of sensitive data has occurred in which a threat actor has compromised the organization's email system. Per the incident response procedures, this breach requires notifying the board immediately. Which of the following would be the BEST method of communication?

  A. Post of the company blog
  B. Corporate-hosted encrypted email
  C. VoIP phone call
  D. Summary sent by certified mail
  E. Externally hosted instant message
  C. VoIP phone call

• Question 214:

  A malware infection spread to numerous workstations within the marketing department. The workstations were quarantined and replaced with machines.

  Which of the following represents a FINAL step in the eradication of the malware?

  A. The workstations should be isolated from the network.
  B. The workstations should be donated for reuse.
  C. The workstations should be reimaged.
  D. The workstations should be patched and scanned.
  D. The workstations should be patched and scanned.

• Question 215:

  A penetration tester physically enters a datacenter and attaches a small device to a switch. As part of the tester's effort to evaluate which nodes are present on the network, the tester places the network adapter in promiscuous mode and logs traffic for later analysis. Which of the following is the tester performing?

  A. Credentialed scanning
  B. Passive scanning
  C. Protocol analysis
  D. SCAP scanning
  E. Network segmentation
  B. Passive scanning

  ---

  Explanation/Reference:

  Reference: https://whatis.techtarget.com/definition/passive-scanning#:~:text=Passive%20scanning%20is%20a%20method,target%20computer%20without%20direct%20interaction.andtext=For%20an%20administrator%2C%20the% 20main,target%20computer%2C%20such%20as%20freezes

• Question 216:

  The inability to do remote updates of certificates. keys software and firmware is a security issue commonly associated with:

  A. web servers on private networks.
  B. HVAC control systems
  C. smartphones
  D. firewalls and UTM devices
  B. HVAC control systems

• Question 217:

  HOTSPOT

  Welcome to the Enterprise Help Desk System. Please work the ticket escalated to you in the help desk ticket queue.

  INSTRUCTIONS

  Click on the ticket to see the ticket details. Additional content is available on tabs within the ticket.

  First, select the appropriate issue from the drop-down menu. Then, select the MOST likely root cause from second drop-down menu.

  If at any time you would like to bring back the initial state of the simulation, please click the Reset All button.

  

  

  

  

  

  

  Hot Area:

  

  

  ---

  Explanation/Reference:

• Question 218:

  An organization's Chief Information Security Officer is creating a position that will be responsible for implementing technical controls to protect data, including ensuring backups are properly maintained. Which of the following roles would MOST likely include these responsibilities?

  A. Data protection officer
  B. Data owner
  C. Backup administrator
  D. Data custodian
  E. Internal auditor
  D. Data custodian

  ---

  Explanation/Reference:

  D. In this case, Data custodian, role would be the best fit because it includes responsibilities for protecting data, including securing, monitoring, and controlling access to it, as well as ensuring data is accurate, complete, and accessible when needed. Ensuring that backups are properly maintained would fall under the responsibilities of a data custodian, as they would be responsible for protecting data and ensuring its availability.

• Question 219:

  An organization is performing a risk assessment to prioritize resources for mitigation and remediation based on impact. Which of the following metrics, in addition to the CVSS for each CVE, would best enable the organization to prioritize is efforts?

  A. OS type
  B. OS or application versions
  C. Patch availability
  D. System architecture
  E. Mission criticality
  E. Mission criticality

• Question 220:

  A company's asset management software has been discovering a weekly increase in non-standard software installed on end users' machines with duplicate license keys. The security analyst wants to know if any of this software is listening on

  any non-standard ports, such as 6667. Which of the following tools should the analyst recommend to block any command and control traffic?

  A. Netstat
  B. NIDS
  C. IPS
  D. HIDS
  C. IPS