CS0-003 practice questions 421–430

1. Question 421 · 527 in bank

   An analyst wants to detect outdated software packages on a server. Which of the following methodologies will achieve this objective?

   • AData loss prevention
   • BConfiguration management
   • CCommon vulnerabilities and exposures
   • DCredentialed scanning

   Show answer

   Answer: D

   Next question

2. Question 422 · 527 in bank

   A systems administrator receives several reports about emails containing phishing links. The hosting domain is always different, but the URL follows a specific pattern of characters. Which of the following is the best way for the administrator to find more messages that were not reported?

   • ASearch email logs for a regular expression.
   • BOpen a support ticket with the email hosting provider.
   • CSend a memo to all staff asking them to report suspicious emails.
   • DQuery firewall logs for any traffic with a suspicious website.

   Show answer

   Answer: A

   Next question

3. Question 423 · 527 in bank

   A security analyst receives an alert with the following packet capture attached:

   

   Which of the following has occurred?

   • Asslscan reconnaissance
   • BA password stuffing attack
   • CAn Nmap scan
   • DAn nc reverse shell

   Show answer

   Answer: C

   Next question

4. Question 424 · 527 in bank

   A company runs a website that allows public posts. Recently, some users report that when visiting the website, pop-ups appear asking the users for their credentials. Which of the following is the most likely cause of this issue?

   • ARootkit
   • BSQL injection
   • CCSRF
   • DXSS

   Show answer

   Answer: D

   Next question

5. Question 425 · 527 in bank

   A security manager has decided to form a special group of analysts who participate in both penetration testing and defending the company's network infrastructure during exercises. Which of the following teams should the group form in order to achieve this goal?

   • ABlue team
   • BPurple team
   • CRed team
   • DGreen team

   Show answer

   Answer: B

   Next question

6. Question 426 · 527 in bank

   Which of the following documents should link to the recovery point objectives and recovery time objectives on critical services?

   • ADisaster recovery plan
   • BBusiness impact analysis
   • CPlaybook
   • DBackup plan

   Show answer

   Answer: B

   Next question

7. Question 427 · 527 in bank

   A security analyst reviews the following output:

   

   Which of the following malicious activities is occurring?

   • AARP poisoning
   • BMAC flooding
   • CARP spoofing
   • DARP scanning

   Show answer

   Answer: D

   Next question

8. Question 428 · 527 in bank

   An e-commerce organization recently experienced a cyberattack. During a lessons learned meeting, a cybersecurity analyst requests that the RTO is prioritized. Which of the following is the greatest concern?

   • AIntegrity
   • BAvailability
   • CNon-repudiation
   • DConfidentiality

   Show answer

   Answer: B

   Next question

9. Question 429 · 527 in bank

   A security analyst reviews a SIEM alert related to a suspicious email and wants to verify the authenticity of the message: SPF = PASS - DKIM = FAIL - DMARC = FAIL - Which of the following did the analyst most likely discover?

   • AAn insider threat altered email security records to mask suspicious DNS resolution traffic.
   • BThe message was sent from an authorized mail server but was not signed.
   • CLog normalization corrupted the data as it was brought into the central repository.
   • DThe email security software did not process all of the records correctly.

   Show answer

   Answer: B

   Next question

10. Question 430 · 527 in bank

    An analyst is reviewing an SSLscan from a web server in an environment:

    

    The analyst needs to immediately disable ciphers that do not comply with company security standards. Which of the following ciphers is the least secure and should be disabled?

    • AAES128-SHA
    • B128 bits DHE-RSA-AES128-GCM-SHA256 DHE 2048 bits
    • CECDHE-RSA-AES128-SHA Curve 25519 DHE 253
    • DECDHE-RSA-AES256-GCM-SHA384 Curve P-384 DHE 384
    • EDES-CBC3-SHA
    • FAES256-GCM-SHA384

    Show answer

    Answer: E

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

CS0-003 practice, question 421. 527 questions available.