CompTIA CS0-002 Online Practice Questions and Exam Preparation

CompTIA CS0-002 Online Questions & Answers

• Question 771:

  Which of the following is a reason for correctly identifying APTs that might be targeting an organization?

  A. APTs' passion for social justice will make them ongoing and motivated attackers.
  B. APTs utilize methods and technologies differently than other threats.
  C. APTs are primarily focused on financial gain and are widely available over the internet.
  D. APTs lack sophisticated methods, but their dedication makes them persistent.
  B. APTs utilize methods and technologies differently than other threats.

• Question 772:

  A cyber-security analyst is implementing a new network configuration on an existing network access layer to prevent possible physical attacks. Which of the following BEST describes a solution that would apply and cause fewer issues during the deployment phase?

  A. Implement port security with one MAC address per network port of the switch.
  B. Deploy network address protection with DHCP and dynamic VLANs.
  C. Configure 802.1X and EAPOL across the network
  D. Implement software-defined networking and security groups for isolation
  A. Implement port security with one MAC address per network port of the switch.

• Question 773:

  As part of an organization's information security governance process, a Chief Information Security Officer (CISO) is working with the compliance officer to update policies to include statements related to new regulatory and legal requirements. Which of the following should be done to BEST ensure all employees are appropriately aware of changes to the policies?

  A. Conduct a risk assessment based on the controls defined in the newly revised policies
  B. Require all employees to attend updated security awareness training and sign an acknowledgement
  C. Post the policies on the organization's intranet and provide copies of any revised policies to all active vendors
  D. Distribute revised copies of policies to employees and obtain a signed acknowledgement from them
  B. Require all employees to attend updated security awareness training and sign an acknowledgement

• Question 774:

  While monitoring the information security notification mailbox, a security analyst notices several emails were repotted as spam. Which of the following should the analyst do FIRST?

  A. Block the sender In the email gateway.
  B. Delete the email from the company's email servers.
  C. Ask the sender to stop sending messages.
  D. Review the message in a secure environment.
  D. Review the message in a secure environment.

• Question 775:

  A financial institution's business unit plans to deploy a new technology in a manner that violates existing information security standards. Which of the following actions should the Chief Information Security Officer (CISO) take to manage any

  type of violation?

  A. Enforce the existing security standards and controls
  B. Perform a risk analysis and qualify the risk with legal
  C. Perform research and propose a better technology
  D. Enforce the standard permits
  B. Perform a risk analysis and qualify the risk with legal

  ---

  Explanation/Reference:

  The International Standards Organization, or ISO, develops standards for businesses around the world so that they may operate using a uniform set of best practices. These standards are not enforceable laws, but companies who choose to follow them stand to gain international credibility from their compliance; standards are set as guidance for best practices but are not enforceable laws

• Question 776:

  A company recently experienced a breach of sensitive information that affects customers across multiple geographical regions. Which of the following roles would be BEST suited to determine the breach notification requirements?

  A. Legal counsel
  B. Chief Security Officer
  C. Human resources
  D. Law enforcement
  A. Legal counsel

• Question 777:

  Which of the following are important reasons for performing proactive threat-hunting activities? (Choose two.)

  A. To ensure all alerts are fully investigated
  B. To test incident response capabilities
  C. To uncover unknown threats
  D. To allow alerting rules to be more specific
  E. To create a new security baseline
  F. To improve user awareness about security threats
  C. To uncover unknown threats
  D. To allow alerting rules to be more specific

• Question 778:

  As part of the SDLC, software developers are testing the security of a new web application by inputting large amounts of random data. Which of the following types of testing is being performed?

  A. Fuzzing
  B. Regression testing
  C. Stress testing
  D. Input validation
  A. Fuzzing

• Question 779:

  Which of the following command line utilities would an analyst use on an end-user PC to determine the ports it is listening on?

  A. tracert
  B. ping
  C. nslookup
  D. netstat
  D. netstat

• Question 780:

  A technician receives an alert indicating an endpoint is beaconing to a suspect dynamic DNS domain. Which of the following countermeasures should be used to BEST protect the network in response to this alert? (Choose two.)

  A. Set up a sinkhole for that dynamic DNS domain to prevent communication.
  B. Isolate the infected endpoint to prevent the potential spread of malicious activity.
  C. Implement an internal honeypot to catch the malicious traffic and trace it.
  D. Perform a risk assessment and implement compensating controls.
  E. Ensure the IDS is active on the network segment where the endpoint resides.
  A. Set up a sinkhole for that dynamic DNS domain to prevent communication.
  B. Isolate the infected endpoint to prevent the potential spread of malicious activity.