CS0-001 Dumps PDF New [2022] Ultimate Study Guide [Q115-Q132]

NEW QUESTION 115
The help desk has reported that users are reusing previous passwords when prompted to change them. Which of the following would be the MOST appropriate control for the security analyst to configure to prevent password reuse? (Choose two.)

NEW QUESTION 116
A cybersecurity analyst is reviewing the current BYOD security posture. The users must be able to synchronize their calendars, email, and contacts to a smartphone or other personal device. The recommendation must provide the most flexibility to users. Which of the following recommendations would meet both the mobile data protection efforts and the business requirements described in this scenario?

NEW QUESTION 117
A company has monthly scheduled windows for patching servers and applying configuration changes. Out-of- window changes can be done, but they are discouraged unless absolutely necessary. The systems administrator is reviewing the weekly vulnerability scan report that was just released. Which of the following vulnerabilities should the administrator fix without waiting for the next scheduled change window?

NEW QUESTION 118
An insurance company employs quick-response team drivers that can corporate issued mobile devices with the insurance company’s app installed on them Devices are configuration hardened by an MOM and kept up to date. The employees use the app to collect insurance claim into formation and process payments Recently, a number of customers have filed complaints of credit card fraud against the insurance company, Which occurred shortly after their payments were processed via the mobile app. The cyber- incidence response team has been asked investigate. Which of the following is MOST likely the cause? ^

NEW QUESTION 119
Malware is suspected on a server in the environment. The analyst is provided with the output of commands from servers in the environment and needs to review all output files in order to determine which process running on one of the servers may be malware. Servers 1, 2 and 4 are clickable. Select the Server which hosts the malware, and select the process which hosts this malware.
Instructions:
If any time you would like to bring back the initial state of the simulation, please select the Reset button.
When you have completed the simulation, please select the Done button to submit. Once the simulation is submitted, please select the Next button to continue.

NEW QUESTION 120
A company has been a victim of multiple volumetric DoS attacks. Packet analysis of the offending traffic shows the following:

Which of the following mitigation techniques is MOST effective against the above attack?

NEW QUESTION 121
A newly discovered malware has a known behavior of connecting outbound to an external destination on port 27500 for the purpose of exfiltrating data. The following are four snippets taken from running netstat
-anon separate Windows workstations:




Based on the above information, which of the following is MOST likely to be exposed to this malware?

NEW QUESTION 122
There have been several exploits to critical devices within the network. However, there is currently no process to perform vulnerability analysis.
Which of the following should the security analyst implement during production hours to identify critical threats and vulnerabilities?

NEW QUESTION 123
The director of software development is concerned with recent web application security incidents, including the successful breach of a back-end database server. The director would like to work with the security team to implement a standardized way to design, build, and test web applications and the services that support them.
Which of the following meets the criteria?

NEW QUESTION 124
Given a packet capture of the following scan:

Which of the following should MOST likely be inferred on the scan’s output?

NEW QUESTION 125
A corporation employs a number of small-form-factor workstations and mobile devices, and an incident
response team is therefore required to build a forensics kit with tools to support chip-off analysis. Which of
the following tools would BEST meet this requirement?

NEW QUESTION 126
A cybersecurity analyst has received an alert that well-known “call home” messages are continuously observed by network sensors at the network boundary. The proxy firewall successfully drops the messages. After determining the alert was a true positive, which of the following represents the MOST likely cause?

NEW QUESTION 127
A security analyst has noticed an alert from the SIEM. A workstation is repeatedly trying to connect to port
445 of a file server on the production network. All of the attempts are made with invalid credentials. Which of the following describes what is occurring?

NEW QUESTION 128
An analyst is reviewing a list of vulnerabilities, which were reported from a recent vulnerability scan of a Linux server.
Which of the following is MOST likely to be a false positive?

NEW QUESTION 129
In order to leverage the power of data correlation within Nessus, a cybersecurity analyst needs to write an SQL statement that will provide how long a vulnerability has been present on the network.
Given the following output table:

Which of the following SQL statements would provide the resulted output needed for this correlation?

NEW QUESTION 130
A security analyst is reviewing a report from the networking department that describes an increase in
network utilization, which is causing network performance issues on some systems. A top talkers report
over a five-minute sample is included.

Given the above output of the sample, which of the following should the security analyst accomplish FIRST
to help track down the performance issues?

NEW QUESTION 131
The primary difference in concern between remediating identified vulnerabilities found in general-purpose IT network servers and that of SCADA systems is that:

NEW QUESTION 132
While investigating an Incident, a security analyst reviews the output of the history command on a Linux machine. The analyst receives the following output:

Which of the following should the analyst conclude from the analysis of this output?