CompTIA CS0-002 Online Practice Questions and Exam Preparation

CompTIA CS0-002 Online Questions & Answers

• Question 21:

  A computer hardware manufacturer is developing a new SoC that will be used by mobile devices. The SoC should not allow users or the process to downgrade from a newer firmware to an older one. Which of the following can the hardware manufacturer implement to prevent firmware downgrades?

  A. Encryption
  B. eFuse
  C. Secure Enclave
  D. Trusted execution
  B. eFuse

• Question 22:

  A security analyst conducted a risk assessment on an organization's wireless network and identified a high-risk element in the implementation of data confidentially protection. Which of the following is the BEST technical security control to mitigate this risk?

  A. Switch to RADIUS technology
  B. Switch to TACACS+ technology.
  C. Switch to 802 IX technology
  D. Switch to the WPA2 protocol.
  D. Switch to the WPA2 protocol.

• Question 23:

  The following IDS log was discovered by a company's cybersecurity analyst:

  

  Which of the following was launched against the company based on the IDS log?

  A. SQL injection attack
  B. Cross-site scripting attack
  C. Buffer overflow attack
  D. Online password crack attack
  C. Buffer overflow attack

• Question 24:

  During a review of recent network traffic, an analyst realizes the team has seen this same traffic multiple times in the past three weeks, and it resulted in confirmed malware activity The analyst also notes there is no other alert in place for this traffic After resolving the security incident, which of the following would be the BEST action for the analyst to take to increase the chance of detecting this traffic in the future?

  A. Share details of the security incident with the organization's human resources management team
  B. Note the secunty incident so other analysts are aware the traffic is malicious
  C. Communicate the secunty incident to the threat team for further review and analysis
  D. Report the security incident to a manager for inclusion in the daily report
  C. Communicate the secunty incident to the threat team for further review and analysis

• Question 25:

  The help desk has reported that users are reusing previous passwords when prompted to change them. Which of the following would be the MOST appropriate control for the security analyst to configure to prevent password reuse?

  A. Implement mandatory access control on all workstations.
  B. Implement role-based access control within directory services.
  C. Deploy Group Policy Objects to domain resources.
  D. Implement scripts to automate the configuration of PAM on Linux hosts.
  E. Deploy a single-sing-on solution for both Windows and Linux hosts.
  C. Deploy Group Policy Objects to domain resources.

• Question 26:

  Which of the following BEST explains the function of a managerial control?

  A. To scope the security planning, program development, and maintenance of the security life cycle
  B. To guide the development of training, education, security awareness programs, and system maintenance
  C. To implement data classification, risk assessments, security control reviews, and contingency planning
  D. To ensure tactical design, selection of technology to protect data, logical access reviews, and the implementation of audit trails
  C. To implement data classification, risk assessments, security control reviews, and contingency planning

  ---

  Explanation/Reference:

  https://www.examtopics.com/discussions/comptia/view/84935-exam-cs0-002-topic-1-question-191-discussion/

• Question 27:

  A security analyst needs to reduce the overall attack surface. Which of the following infrastructure changes should the analyst recommend?

  A. Implement a honeypot.
  B. Air gap sensitive systems.
  C. Increase the network segmentation.
  D. Implement a cloud-based architecture.
  C. Increase the network segmentation.

  ---

  Explanation/Reference:

  Reference: https://www.securitymagazine.com/articles/89283-ways-to-reduce-your-attack-surface

• Question 28:

  A security analyst is deploying a new application in the environment. The application needs to be integrated with several existing applications that contain SPI Pnor to the deployment, the analyst should conduct:

  A. a tabletop exercise
  B. a business impact analysis
  C. a PCI assessment
  D. an application stress test.
  B. a business impact analysis

• Question 29:

  A security analyst has performed various scans and found vulnerabilities in several applications that affect production data. Remediation of all exploits may cause certain applications to no longer work. Which of the following activities would need to be conducted BEFORE remediation?

  A. Fuzzing
  B. Input validation
  C. Change control
  D. Sandboxing
  C. Change control

• Question 30:

  A security analyst is reviewing the following web server log:

  GET %2f..%2f..%2f.. %2f.. %2f.. %2f.. %2f../etc/passwd

  Which of the following BEST describes the issue?

  A. Directory traversal exploit
  B. Cross-site scripting
  C. SQL injection
  D. Cross-site request forgery
  A. Directory traversal exploit