CS0-003 practice questions 481–490

1. Question 481 · 527 in bank

   A security analyst wants to implement new monitoring controls in order to find abnormal account activity for traveling employees. Which of the following techniques would deliver the expected results?

   • AMalicious command interpretation
   • BNetwork monitoring
   • CUser behavior analysis
   • DSSL inspection

   Show answer

   Answer: C

   Next question

2. Question 482 · 527 in bank

   A SOC manager is looking for a solution that can improve the response time and execute predetermined instructions. Which of the following is the best solution based on these requirements?

   • AXDR
   • BSIEM
   • CCASB
   • DSOAR

   Show answer

   Answer: D

   Next question

3. Question 483 · 527 in bank

   Which of the following is the best technical method to protect sensitive data at an organizational level?

   • ADeny all traffic on port 8080 with sensitive information on the VLAN.
   • BDevelop a Python script to review email traffic for PII.
   • CEmploy a restrictive policy for the use and distribution of sensitive information.
   • DImplement a DLP for all egress and ingress of sensitive information on the network.

   Show answer

   Answer: D

   Next question

4. Question 484 · 527 in bank

   A company wants to grant access to identity administrators who are completing similar tasks. Which of the following access control models should the company use?

   • AMandatory access
   • BRole-based access
   • CAttribute-based access
   • DDiscretionary access

   Show answer

   Answer: B

   Next question

5. Question 485 · 527 in bank

   A DevOps analyst implements a webhook to trigger code vulnerability scanning for submissions to the repository. Which of the following is the primary benefit of this enhancement?

   • ATo increase coverage by making the process occur automatically with uploads
   • BTo create a single pane of glass dashboard for the vulnerability management process
   • CTo include a threat feed component into the software development life cycle
   • DTo employ data enrichment for new code commits to enhance project documentation

   Show answer

   Answer: A

   Next question

6. Question 486 · 527 in bank

   A security analyst is looking for information that would serve as an indicator that a given IP address is Involved in other attacks. Which of the following sources of information should the analyst use to achieve this objective?

   • AAbuseIPDB
   • BAutonomous System Number
   • CWhois
   • DCuckoo Sandbox

   Show answer

   Answer: A

   Next question

7. Question 487 · 527 in bank

   A security analyst is assessing the security of a cloud environment. The following output is generated when the assessment runs: Authentication error - Instance not found on preset location Which of the following should the analyst use to fix the issue?

   • Arun module_name and exec
   • B--session and --module-args=""
   • Cset_regions and set_key
   • D--whoami and --data

   Show answer

   Answer: C

   Next question

8. Question 488 · 527 in bank

   An organization's Chief Information Security Officer (CISO) is organizing a tabletop drill. The CISO has included several other executives in the meeting invitation for the drill, as required. Which of the following is the best reason for including the Chief Communications Officer?

   • ADeciding when and how to issue press releases regarding incidents can minimize damage to the organization's brand reputation.
   • BAll of the organization's high-level executives should know about the IT department's incident response plan.
   • CAll parties must be able to communicate clearly. concisely, and consistently during incident response.
   • DThe CISO would like to increase the security department's visibility to senior executives.

   Show answer

   Answer: A

   Next question

9. Question 489 · 527 in bank

   An organization wants to implement an identity and access management technology that is resistant to phishing attacks. Which of the following is the best technology to implement?

   • AFederation
   • BPrivileged access management
   • CPasswordless authentication
   • DSingle sign-on

   Show answer

   Answer: C

   Next question

10. Question 490 · 527 in bank

    A security analyst discovers that, over three months, an attacker has slowly created multiple accounts on a web server while avoiding detection. Which of the following best describes this threat actor?

    • AScript kiddie threat actor
    • BAdvanced persistent threat actor
    • CInsider threat actor
    • DHacktivist threat actor

    Show answer

    Answer: B

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

CS0-003 practice, question 481. 527 questions available.