CS0-002 CompTIA Exam Questions and Free Practice Test

Question 7

Which of the following attacks can be prevented by using output encoding?

A. Server-side request forgery

B. Cross-site scripting

C. SQL injection

D. Command injection

E. Cross-site request forgery

F. Directory traversal

Correct Answer:B

Question 8

Risk management wants IT to implement a solution that will permit an analyst to intercept, execute, and analyze potentially malicious files that are downloaded from the Internet.
Which of the following would BEST provide this solution?

A. File fingerprinting

B. Decomposition of malware

C. Risk evaluation

D. Sandboxing

Correct Answer:D

Question 9

The inability to do remote updates of certificates. keys software and firmware is a security issue commonly associated with:

A. web servers on private networks.

B. HVAC control systems

C. smartphones

D. firewalls and UTM devices

Correct Answer:B

Question 10

An audit has revealed an organization is utilizing a large number of servers that are running unsupported operating systems.
As part of the management response phase of the audit, which of the following would BEST demonstrate senior management is appropriately aware of and addressing the issue?

A. Copies of prior audits that did not identify the servers as an issue

B. Project plans relating to the replacement of the servers that were approved by management

C. Minutes from meetings in which risk assessment activities addressing the servers were discussed

D. ACLs from perimeter firewalls showing blocked access to the servers

E. Copies of change orders relating to the vulnerable servers

Correct Answer:C

Question 11

An organization has not had an incident for several months. The Chief Information Security Officer (CISO) wants to move to a more proactive stance for security investigations. Which of the following would BEST meet that goal?

A. Root-cause analysis

B. Active response

C. Advanced antivirus

D. Information-sharing community

E. Threat hunting

Correct Answer:E

Question 12

During an investigation, a security analyst identified machines that are infected with malware the antivirus was unable to detect.
Which of the following is the BEST place to acquire evidence to perform data carving?

A. The system memory

B. The hard drive

C. Network packets

D. The Windows Registry

Correct Answer:A

START CS0-002 EXAM