最新的CompTIA Cybersecurity Analyst (CySA+) Certification - CS0-002免費考試真題
問題1
A security analyst is investigating a data leak on a corporate website. The attacker was able to dump data by sending a crafted HTTP request with the following payload:
Which of the following systems would most likely have logs with details regarding the threat actor's requests?
Which of the following systems would most likely have logs with details regarding the threat actor's requests?
正確答案: A
說明：（僅 VCESoft 成員可見）
問題2
A vulnerability scanner has identified an out-of-support database software version running on a server. The software update will take six to nine months to complete. The management team has agreed to a one-year extended support contract with the software vendor. Which of the following BEST describes the risk treatment in this scenario?
正確答案: B
說明：（僅 VCESoft 成員可見）
問題3
During an incident investigation, a security analyst discovers the web server is generating an unusually high volume of logs The analyst observes the following response codes:
* 20% of the logs are 403
* 20% of the logs are 404
* 50% of the logs are 200
* 10% of the logs are other codes
The server generates 2MB of logs on a daily basis, and the current day log is over 200MB. Which of the following commands should the analyst use to identify the source of the activity?
* 20% of the logs are 403
* 20% of the logs are 404
* 50% of the logs are 200
* 10% of the logs are other codes
The server generates 2MB of logs on a daily basis, and the current day log is over 200MB. Which of the following commands should the analyst use to identify the source of the activity?
正確答案: E
說明：（僅 VCESoft 成員可見）
問題4
While conoXicting a cloud assessment, a security analyst performs a Prowler scan, which generates the following within the report:
Based on the Prowler report, which of the following is the BEST recommendation?
Based on the Prowler report, which of the following is the BEST recommendation?
正確答案: D
說明：（僅 VCESoft 成員可見）
問題5
Which of the following BEST describes what an organizations incident response plan should cover regarding how the organization handles public or private disclosures of an incident?
正確答案: A
說明：（僅 VCESoft 成員可見）
問題6
A security technician is testing a solution that will prevent outside entities from spoofing the company's email domain, which is compatia.org. The testing is successful, and the security technician is prepared to fully implement the solution. Which of the following actions should the technician take to accomplish this task?
正確答案: D
說明：（僅 VCESoft 成員可見）
問題7
An analyst is performing a BIA and needs to consider measures and metrics. Which of the following would help the analyst achieve this objective? (Select two).
正確答案: D,F
說明：（僅 VCESoft 成員可見）
問題8
The management team has asked a senior security engineer to explore DLP security solutions for the company's growing use of cloud-based storage. Which of the following is an appropriate solution to control the sensitive data that is being stored in the cloud?
正確答案: C
說明：（僅 VCESoft 成員可見）
問題9
Which of the following lines from this output most likely indicates that attackers could quickly use brute force and determine the negotiated secret session key?
正確答案: A
說明：（僅 VCESoft 成員可見）
問題10
A new prototype for a company's flagship product was leaked on the internet As a result, the management team has locked out all USB drives Optical drive writers are not present on company computers The sales team has been granted an exception to share sales presentation files with third parties Which of the following would allow the IT team to determine which devices are USB enabled?
正確答案: D
說明：（僅 VCESoft 成員可見）
問題11
A security analyst needs to recommend the best approach to test a new application that simulates abnormal user behavior to find software bugs. Which of the following would best accomplish this task?
正確答案: C
說明：（僅 VCESoft 成員可見）
問題12
A company employee downloads an application from the internet. After the installation, the employee begins experiencing noticeable performance issues, and files are appearing on the desktop.
Which of the following processes will the security analyst Identify as the MOST likely indicator of system compromise given the processes running in Task Manager?
Which of the following processes will the security analyst Identify as the MOST likely indicator of system compromise given the processes running in Task Manager?
正確答案: A
說明：（僅 VCESoft 成員可見）
問題13
The steering committee for information security management annually reviews the security incident register for the organization to look for trends and systematic issues. The steering committee wants to rank the risks based on past incidents to improve the security program for next year. Below is the incident register for the organization:
Which of the following should the organization consider investing in first due to the potential impact of availability?
Which of the following should the organization consider investing in first due to the potential impact of availability?
正確答案: B
說明：（僅 VCESoft 成員可見）
問題14
An organization is adopting loT devices at an increasing rate and will need to account for firmware updates in its vulnerability management programs. Despite the number of devices being deployed, the organization has only focused on software patches so far. leaving hardware-related weaknesses open to compromise. Which of the following best practices will help the organization to track and deploy trusted firmware updates as part of its vulnerability management programs?
正確答案: C
說明：（僅 VCESoft 成員可見）
