2024 Valid CS0-002 Real Exam Questions (Updated) 100% Dumps & Practice Exam [Q190-Q204]

Rate this post

2024 Valid CS0-002 Real Exam Questions (Updated) 100% Dumps & Practice Exam

[UPDATED 2024] CompTIA CS0-002 Questions Prepare with Free Demo of PDF

NEW QUESTION 190
A cybersecurity analyst routinely checks logs, querying for login attempts. While querying for unsuccessful login attempts during a five-day period, the analyst produces the following report:

Which of the following BEST describes what the analyst Just found?

Users 4 and 5 are using their credentials to transfer files to multiple servers.

Users 4 and 5 are using their credentials to run an unauthorized scheduled task targeting some servers In the cloud.

An unauthorized user is using login credentials in a script.

A bot is running a brute-force attack in an attempt to log in to the domain.

NEW QUESTION 191
A security analyst is reviewing packet captures from a system that was compromised. The system was already isolated from the network, but it did have network access for a few hours after being compromised. When viewing the capture in a packet analyzer, the analyst sees the following:

Which of the following can the analyst conclude?

Malware is attempting to beacon to 128.50.100.3.

The system is running a DoS attack against ajgidwle.com.

The system is scanning ajgidwle.com for PII.

Data is being exfiltrated over DNS.

NEW QUESTION 192
A security analyst is researching ways to improve the security of a company’s email system to mitigate emails that are impersonating company executives. Which of the following would be BEST for the analyst to configure to achieve this objective?

A TXT record on the name server for SPF

DNSSEC keys to secure replication

Domain Keys identified Man

A sandbox to check incoming mad

NEW QUESTION 193
An email analysis system notifies a security analyst that the following message was quarantined and requires further review.

Which of the following actions should the security analyst take?

Release the email for delivery due to its importance.

Immediately contact a purchasing agent to expedite.

Delete the email and block the sender.

Purchase the gift cards and submit an expense report.

NEW QUESTION 194
A company is experiencing a malware attack within its network. A security engineer notices many of the impacted assets are connecting outbound to a number of remote destinations and exfiltrating dat a. The security engineer also see that deployed, up-to-date antivirus signatures are ineffective. Which of the following is the BEST approach to prevent any impact to the company from similar attacks in the future?

IDS signatures

Data loss prevention

Port security

Sinkholing

NEW QUESTION 195
During a forensic investigation, a security analyst reviews some Session Initiation Protocol packets that came from a suspicious IP address. Law enforcement requires access to a VoIP call that originated from the suspicious IP address. Which of the following should the analyst use to accomplish this task?

Wireshark

iptables

Tcpdump

Netflow

NEW QUESTION 196
A company recently experienced financial fraud, which included shared passwords being compromised and improper levels of access being granted The company has asked a security analyst to help improve its controls.
Which of the following will MOST likely help the security analyst develop better controls?

An evidence summarization

An indicator of compromise

An incident response plan

A lessons-learned report

NEW QUESTION 197
An organization wants to implement a privileged access management solution to belter manage the use ot emergency and privileged service accounts Which of the following would BEST satisfy the organization’s goal?

Access control lists

Discretionary access controls

Policy-based access controls

Credential vaulting

NEW QUESTION 198
A product manager is working with an analyst to design a new application that will perform as a data analytics platform and will be accessible via a web browser. The product manager suggests using a PaaS provider to host the application.
Which of the following is a security concern when using a PaaS solution?

The use of infrastructure-as-code capabilities leads to an increased attack surface.

Patching the underlying application server becomes the responsibility of the client.

The application is unable to use encryption at the database level.

Insecure application programming interfaces can lead to data compromise.

NEW QUESTION 199
A company wants to outsource a key human-resources application service to remote employees as a SaaS-based cloud solution. The company’s GREATEST concern should be the SaaS provider’s:

DLP procedures.

logging and monitoring capabilities.

data protection capabilities.

SLA for system uptime.

NEW QUESTION 200
According to a static analysis report for a web application, a dynamic code evaluation script injection vulnerability was found. Which of the following actions is the BEST option to fix the vulnerability in the source code?

Delete the vulnerable section of the code immediately.

Create a custom rule on the web application firewall.

Validate user input before execution and interpretation.

Use parameterized queries.

NEW QUESTION 201
A cybersecurity analyst is currently investigating a server outage.
The analyst has discovered the following value was entered for the username: 0xbfff601a.
Which of the following attacks may be occurring?

Buffer overflow attack

Man-in-the-middle attack

Smurf attack

Format string attack

Denial of service attack

NEW QUESTION 202
A product manager is working with an analyst to design a new application that will perform as a data analytics platform and will be accessible via a web browser. The product manager suggests using a PaaS provider to host the application.
Which of the following is a security concern when using a PaaS solution?

The use of infrastructure-as-code capabilities leads to an increased attack surface.

Patching the underlying application server becomes the responsibility of the client.

The application is unable to use encryption at the database level.

Insecure application programming interfaces can lead to data compromise.

NEW QUESTION 203
A vulnerability scan returned the following results for a web server that hosts multiple wiki sites:
Apache-HTTPD-cve-2014-023: Apache HTTPD: mod_cgid denial of service CVE-2014- Due to a flaw found in mog_cgid, a server using mod_cgid to host CGI scripts could be vulnerable to a DoS attack caused by a remote attacker who is exploiting a weakness in non-standard input, causing processes to hang indefinitely.

The security analyst has confirmed the server hosts standard CGI scripts for the wiki sites, does not have mod_cgid installed, is running Apache 2.2.22, and is not behind a WAF. The server is located in the DMZ, and the purpose of the server is to allow customers to add entries into a publicly accessible database.
Which of the following would be the MOST efficient way to address this finding?

Place the server behind a WAF to prevent DoS attacks from occurring.

Document the finding as a false positive.

Upgrade to the newest version of Apache.

Disable the HTTP service and use only HTTPS to access the server.

NEW QUESTION 204
An organization has the following risk mitigation policies
* Risks without compensating controls will be mitigated first it the nsk value is greater than $50,000
* Other nsk mitigation will be pnontized based on risk value.
The following risks have been identified:

Which of the following is the ordei of priority for risk mitigation from highest to lowest?

A, C, D, B

B, C, D, A

C, B, A, D

C. D, A, B

D, C, B, A

CS0-002 Deluxe Study Guide with Online Test Engine: https://www.actualcollection.com/CS0-002-exam-questions.html

Leave a comment Cancel reply