CS0-002 CompTIA Exam Questions and Free Practice Test

Question 25

A security analyst is reviewing the following web server log:
CS0-002 dumps exhibit
Which of the following BEST describes the issue?

A. Directory traversal exploit

B. Cross-site scripting

C. SQL injection

D. Cross-site request forgery

Correct Answer:A

Question 26

A security analyst was alerted to a tile integrity monitoring event based on a change to the vhost-paymonts .c onf file The output of the diff command against the known-good backup reads as follows
CS0-002 dumps exhibit
Which of the following MOST likely occurred?

A. The file was altered to accept payments without charging the cards

B. The file was altered to avoid logging credit card information

C. The file was altered to verify the card numbers are valid.

D. The file was altered to harvest credit card numbers

Correct Answer:A

Question 27

A security analyst has discovered suspicious traffic and determined a host is connecting to a known malicious website. The MOST appropriate action for the analyst to take would be lo implement a change request to:

A. update the antivirus software

B. configure the firewall to block traffic to the domain

C. add the domain to the blacklist

D. create an IPS signature for the domain

Correct Answer:B

Question 28

A security analyst received a SIEM alert regarding high levels of memory consumption for a critical system. After several attempts to remediate the issue, the system went down. A root cause analysis revealed a bad actor forced the application to not reclaim memory. This caused the system to be depleted of resources.
Which of the following BEST describes this attack?

A. Injection attack

B. Memory corruption

C. Denial of service

D. Array attack

Correct Answer:B

Question 29

A security analyst is building a malware analysis lab. The analyst wants to ensure malicious applications are not capable of escaping the virtual machines and pivoting to other networks.
To BEST mitigate this risk, the analyst should use.

A. an 802.11ac wireless bridge to create an air gap.

B. a managed switch to segment the lab into a separate VLAN.

C. a firewall to isolate the lab network from all other networks.

D. an unmanaged switch to segment the environments from one another.

Correct Answer:C

Question 30

A small organization has proprietary software that is used internally. The system has not been well maintained and cannot be updated with the rest of the environment Which of the following is the BEST solution?

A. Virtualize the system and decommission the physical machine.

B. Remove it from the network and require air gapping.

C. Only allow access to the system via a jumpbox

D. Implement MFA on the specific system.

Correct Answer:A

START CS0-002 EXAM