Question 1

A web application team notifies a SOC analyst that there are thousands of HTTP/404 events on the publicfacing web server. Which of the following is the next step for the analyst to take?

Options :

A : Instruct the firewall engineer that a rule needs to be added to block this external server

B : Escalate the event to an incident and notify the SOC manager of the activity

C : Notify the incident response team that there is a DDoS attack occurring

D : Identify the IP/hostname for the requests and look at the related activity

Answer: D

Question 2

Which of the following threat-modeling procedures is in the OWASP Web Security Testing Guide?

Options :

A : Review Of security requirements

B : Compliance checks

C : Decomposing the application

D : Security by design

Answer: C

Question 3

Which of the following items should be included in a vulnerability scan report? (Choose two.)

Options :

A : Lessons learned

B : Service-level agreement

C : Playbook

D : Affected hosts

E : Risk score

F : Education plan

Answer: A,D

Question 4

An employee accessed a website that caused a device to become infected with invasive malware. The incident

response analyst has:

• created the initial evidence log.

• disabled the wireless adapter on the device.

• interviewed the employee, who was unable to identify the website that was accessed

• reviewed the web proxy traffic logs.

Which of the following should the analyst do to remediate the infected device?

Options :

A : Update the system firmware and reimage the hardware.

B : Install an additional malware scanner that will send email alerts to the analyst.

C : Configure the system to use a proxy server for Internet access.

D : Delete the user profile and restore data from backup.

Answer: A

Question 5

An analyst is designing a message system for a bank. The analyst wants to include a feature that allows the recipient of a message to prove to a third party that the message came from the sender Which of the following information security goals is the analyst most likely trying to achieve?

Options :

A : Non-repudiation

B : Authentication

C : Authorization

D : Integrity

Answer: A

Higher Test Marks with Free Online CS0-003 Exam Practice

Buying Options: