CompTIA CS0-002 Online Practice Questions and Exam Preparation

CompTIA CS0-002 Online Questions & Answers

• Question 41:

  A cybersecurity professional wants to determine if a web server is running on a remote host with the IP address 192.168.1.100. Which of the following can be used to perform this task?

  A. nc 192.168.1.100 -1 80
  B. ps aux 192.168.1.100
  C. nmap 192.168.1.100 -p 80 -A
  D. dig www 192.168.1.100
  E. ping -p 80 192.168.1.100
  C. nmap 192.168.1.100 -p 80 -A

• Question 42:

  An organization recently discovered some inconsistencies in the motherboards it received from a vendor. The organization's security team then provided guidance on how to ensure the authenticity of the motherboards it received from vendors. Which of the following would be the BEST recommendation for the security analyst to provide?

  A. The organization should use a certified, trusted vendor as part of the supply chain.
  B. The organization should evaluate current NDAs to ensure enforceability of legal actions.
  C. The organization should maintain the relationship with the vendor and enforce vulnerability scans.
  D. The organization should ensure all motherboards are equipped with a TPM.
  A. The organization should use a certified, trusted vendor as part of the supply chain.

• Question 43:

  A company has been a victim of multiple volumetric DoS attacks. Packet analysis of the offending traffic shows the following:

  

  Which of the following mitigation techniques is MOST effective against the above attack?

  A. The company should contact the upstream ISP and ask that RFC1918 traffic be dropped.
  B. The company should implement a network-based sinkhole to drop all traffic coming from 192.168.1.1 at their gateway router.
  C. The company should implement the following ACL at their gateway firewall: DENY IP HOST 192.168.1.1 170.43.30.0/24.
  D. The company should enable the DoS resource starvation protection feature of the gateway NIPS.
  A. The company should contact the upstream ISP and ask that RFC1918 traffic be dropped.

• Question 44:

  A company creates digitally signed packages for its devices. Which of the following BEST describes the method by which the security packages are delivered to the company's customers?

  A. Anti-tamper mechanism
  B. SELinux
  C. Trusted firmware updates
  D. eFuse
  C. Trusted firmware updates

• Question 45:

  Which of the following would a security engineer recommend to BEST protect sensitive system data from being accessed on mobile devices?

  A. Use a UEFl boot password.
  B. Implement a self-encrypted disk.
  C. Configure filesystem encryption
  D. Enable Secure Boot using TPM
  C. Configure filesystem encryption

• Question 46:

  A security analyst recently implemented a new vulnerability scanning platform. The initial scan of 438 hosts found the following vulnerabilities:

  210 critical 1,854 high 1,786 medium 48 low

  The analyst is unsure how to handle such a large-scale remediation effort. Which of the following would be the next logical step?

  A. Identify the assets with a high value and remediate all vulnerabilities on those hosts.
  B. Perform remediation activities for all critical and high vulnerabilities first.
  C. Perform a risk calculation to determine the probability and magnitude of exposure.
  D. Identify the vulnerabilities that affect the most systems and remediate them first.
  B. Perform remediation activities for all critical and high vulnerabilities first.

• Question 47:

  A security analyst wants to scan the network for active hosts. Which of the following host characteristics help to differentiate between a virtual and physical host?

  A. Reserved MACs
  B. Host IPs
  C. DNS routing tables
  D. Gateway settings
  A. Reserved MACs

• Question 48:

  On which of the following organizational resources is the lack of an enabled password or PIN a common vulnerability?

  A. VDI systems
  B. Mobile devices
  C. Enterprise server Oss
  D. VPNs
  E. VoIP phones
  B. Mobile devices

• Question 49:

  A security analyst is preparing for the company's upcoming audit. Upon review of the company's latest vulnerability scan, the security analyst finds the following open issues: Which of the following vulnerabilities should be prioritized for remediation FIRST?

  

  A. ICMP timestamp request remote date disclosure
  B. Anonymous FTP enabled
  C. Unsupported web server detection
  D. Microsoft Windows SMB service enumeration via \srvsvc
  C. Unsupported web server detection

• Question 50:

  An analyst needs to provide recommendations for the AUP Which of the following is the BEST recommendation to protect the company's intellectual property?

  A. Company assets must be stored in a locked cabinet when not in use.
  B. Company assets must not be utilized for personal use or gain.
  C. Company assets should never leave the company's property.
  D. AII Internet access must be via a proxy server.
  D. AII Internet access must be via a proxy server.