[Q184-Q204] Get instant access to CS0-001 Practice Tests 2023 Free Updated Today!

QUESTION 184
A malicious user is reviewing the following output:
root:~#ping 192.168.1.137
6 4 bytes from 192.168.2.1 icmp_seq=1 ttl=63 time=1.58 ms
6 4 bytes from 192.168.2.1 icmp_seq=2 ttl=63 time=1.45 ms
root: ~#
Based on the above output, which of the following is the device between the malicious user and the target?

QUESTION 185
A technician receives the following security alert from the firewall’s automated system:

After reviewing the alert, which of the following is the BEST analysis?

QUESTION 186
A recently issued audit report highlight exception related to end-user handling of sensitive data access and credentials. A security manager is addressing the findings. Which of the following activities should be implemented?

QUESTION 187
A cybersecurity analyst is hired to review the security measures implemented within the domain controllers
of a company. Upon review, the cybersecurity analyst notices a brute force attack can be launched against
domain controllers that run on a Windows platform. The first remediation step implemented by the
cybersecurity analyst is to make the account passwords more complex. Which of the following is the NEXT
remediation step the cybersecurity analyst needs to implement?

QUESTION 188
A system administrator has reviewed the following output:

Which of the following can a system administrator infer from the above output?

QUESTION 189
A cybersecurity analyst is reviewing the following outputs:

Which of the following can the analyst infer from the above output?

QUESTION 190
A security analyst discovers a network intrusion and quickly solves the problem by closing an unused port.
Which of the following should be completed?

QUESTION 191
Which of the following best practices is used to identify areas in the network that may be vulnerable to penetration testing from known external sources?

QUESTION 192
Which of the following is a vulnerability that is specific to hypervisors?

QUESTION 193
During winch of the lo.low.ng NIST risk management framework steps would an information system security engineer identify inherited security controls and tailor those controls to the system?

QUESTION 194
An organization wants to remediate vulnerabilities associated with its web servers. An initial vulnerability scan has been performed, and analysts are reviewing the results. Before starting any remediation, the analysts want to remove false positives to avoid spending time on issues that are not actual vulnerabilities.
Which of the following would be an indicator of a likely false positive?

QUESTION 195
A cybersecurity analyst is conducting a security test to ensure that information regarding the web server is protected from disclosure. The cybersecurity analyst requested an HTML file from the web server, and the response came back as follows:

Which of the following actions should be taken to remediate this security issue?

QUESTION 196
Organizational policies require vulnerability remediation on severity 7 or greater within one week. Anything with a severity less than 7 must be remediated within 30 days. The organization also requires security teams to investigate the details of a vulnerability before performing any remediation. If the investigation determines the finding is a false positive, no remediation is performed and the vulnerability scanner configuration is updates to omit the false positive from future scans:
The organization has three Apache web servers:

The results of a recent vulnerability scan are shown below:

The team performs some investigation and finds a statement from Apache:

Which of the following actions should the security team perform?

QUESTION 197
A company has been a victim of multiple volumetric DoS attacks. Packet analysis of the offending traffic shows the following:

Which of the following mitigation techniques is MOST effective against the above attack?

QUESTION 198
An analyst is reviewing the following log from the company web server:

Which of the following is this an example of?

QUESTION 199
A security analyst is performing ongoing scanning and continuous monitoring of the corporate datacenter. Over time, these scans are repeatedly showing susceptibility to the same vulnerabilities and an increase in new vulnerabilities on a specific group of servers that are clustered to run the same application. Which of the following vulnerability management processes should be implemented?

QUESTION 200
An organization uses Common Vulnerability Scoring System (CVSS) scores to prioritize remediation of vulnerabilities.
Management wants to modify the priorities based on a difficulty factor so that vulnerabilities with lower CVSS scores may get a higher priority if they are easier to implement with less risk to system functionality.
Management also wants to quantify the priority. Which of the following would achieve management’s objective?

QUESTION 201
After running a packet analyzer on the network, a security analyst has noticed the following output:

Which of the following is occurring?

QUESTION 202
A security analyst received an alert from the antivirus software identifying a complex instance of malware on a company’s network. The company does not have the resources to fully analyze the malware and determine its effect on the system. Which of the following is the BEST action to take in the incident recovery and post-incident response process?

QUESTION 203
Which of the following is a best practice with regard to interacting with the media during an incident?

QUESTION 204
An organization is attempting to harden its web servers and reduce the information that might be disclosed by potential attackers. A security analyst is reviewing vulnerability scan results from a recent web server scan.
Portions of the scan results are shown below:

Which of the following lines indicates information disclosure about the host that needs to be remediated?