Question 1

A security analyst reviews the following aggregated output from an Nmap scan and the border firewall ACL:

Which of the following should the analyst reconfigure to BEST reduce organizational risk while maintaining current functionality?

Options :

A : PC1

B : PC2

C : Server1

D : Server2

E : Firewall

Answer: B

Question 2

Which of the following sets of attributes BEST illustrates the characteristics of an insider threat from a security perspective?

Options :

A : Unauthorized, unintentional, benign

B : Unauthorized, intentional, malicious

C : Authorized, intentional, malicious

D : Authorized, unintentional, benign

Answer: C

Question 3

A cybersecurity analyst is establishing a threat hunting and intelligence group at a growing organization. Which of the following is a collaborative resource that would MOST likely be used for this purpose?

Options :

A : Scrum

B : loC feeds

C : ISAC

D : VSS scores

Answer: C

Question 4

A company's data is still being exfiltered to business competitors after the implementation of a DLP solution. Which of the following is the most likely reason why the data is still being compromised?

Options :

A : Printed reports from the database contain sensitive information

B : DRM must be implemented with the DLP solution

C : Users are not labeling the appropriate data sets

D : DLP solutions are only effective when they are implemented with disk encryption

Answer: B

Question 5

A vulnerability scanner has identified an out-of-support database software version running on a server. The software update will take six to nine months to complete. The management team has agreed to a one-year extended support contract with the software vendor. Which of the following BEST describes the risk treatment in this scenario?

Options :

A : The extended support mitigates any risk associated with the software.

B : The extended support contract changes this vulnerability finding to a false positive.

C : The company is transferring the risk for the vulnerability to the software vendor.

D : The company is accepting the inherent risk of the vulnerability.

Answer: C

Higher Test Marks with Free Online CS0-002 Exam Practice

Buying Options: