CompTIA CS0-002 真题及答案免费 [Q115-Q131]

Q115. It is important to parameterize queries to prevent .

Q116. A security analyst reviews the latest reports from the company’s vulnerability scanner and discovers the following:

Which of the following changes should the analyst recommend FIRST?

Q117. A company’s legal and accounting teams have decided it would be more cost-effective to offload the risks of data storage to a third party. The IT management team has decided to implement a cloud model and has asked the security team for recommendations. Which of the following will allow all data to be kept on the third-party network?

Q118. A security analyst at exampte.com receives a SIEM alert for an IDS signature and reviews the associated packet capture and TCP stream:


Winch of the following actions should the security analyst lake NEXT?

Q119. A vulnerability assessment solution is hosted in the cloud This solution will be used as an accurate inventory data source for both the configuration management database and the governance nsk and compliance tool An analyst has been asked to automate the data acquisition Which of the following would be the BEST way to acqutre the data’

Q120. A security analyst suspects a malware infection was caused by a user who downloaded malware after clicking
http://<malwaresource>/a.phpin a phishing email.
To prevent other computers from being infected by the same malware variation, the analyst should create a rule on the __________.

Q121. Welcome to the Enterprise Help Desk System. Please work the ticket escalated to you in the desk ticket queue.
说明
Click on me ticket to see the ticket details Additional content is available on tabs within the ticket First, select the appropriate issue from the drop-down menu. Then, select the MOST likely root cause from second drop-down menu If at any time you would like to bring back the initial state of the simulation, please click the Reset All button

Q122. A security analyst is reviewing the following log from an email security service.

Which of the following BEST describes the reason why the email was blocked?

Q123. A security analyst reviews SIEM logs and discovers the following error event:

Which of the following environments does the analyst need to examine to continue troubleshooting the event?

Q124. Due to new regulations, a company has decided to institute an organizational vulnerability management program and assign the function to the security team. Which of the following frameworks would BEST support the program? (Choose two.)

Q125. While reviewing a cyber-risk assessment, an analyst notes there are concerns related to FPGA usage. Which of the following statements would BEST convince the analyst’s supervisor to use additional controls?

Q126. Which of the following BEST describes how logging and monitoring work when entering into a public cloud relationship with a service provider?

Q127. A computer hardware manufacturer developing a new SoC that will be used by mobile devices. The SoC should not allow users or the process to downgrade from a newer firmware to an older one. Which of the following can the hardware manufacturer implement to prevent firmware downgrades?

Q128. A security analyst is attempting to utilize the blowing threat intelligence for developing detection capabilities:

In which of the following phases is this APT MOST likely to leave discoverable artifacts?

Q129. A security analyst, who is working for a company that utilizes Linux servers, receives the following results from a vulnerability scan:

Which of the following is MOST likely a false positive?

Q130. Due to a security breach initiated from South America, the Chief Security Officer (CSO) instructed a team to design and implement an appropriate security control to prevent such an attack from reoccurring. The company has sales and consulting teams across the United States that need access to company resources. The security manager implemented a location-based authentication to prevent non-US-based access to the company networks. Three months later, the same incident reoccurred with an attack originating from a country in Asia. Which of the following security design defects could be the cause?

Q131. Some hard disks need to be taken as evidence for further analysis during an incident response Which of the following procedures must be completed FIRST for this type of evtdertce acquisition?