📘 Free CS0-003 Sample Questions
A recent zero-day vulnerability is being actively exploited, requires no user interaction or privilege escalation, and has a significant impact to confidentiality and integrity but not to availability. Which of the following CVE metrics would be most accurate for this zero-day threat?
A
CVSS:31/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:K/A:L
B
CVSS:31/AV:K/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:L
C
CVSS:31/AV:N/AC:L/PR:N/UI:H/S:U/C:L/I:N/A:H
D
CVSS:31/AV:L/AC:L/PR:R/UI:R/S:U/C:H/I:L/A:H
Correct Answer:
A. CVSS:31/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:K/A:L
Explanation:
CVSS:31/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:K/A:L.
Which of the following tools would work best to prevent the exposure of PII outside of an organization?
A
PAM
B
IDS
C
PKI
D
DLP
Correct Answer:
D. DLP
Explanation:
D. DLP (Data Loss Prevention) DLP (Data Loss Prevention) is a security technology that helps prevent unauthorized access, sharing, or exposure of sensitive data, including PII. It allows organizations to monitor and control the movement of data within and outside the organization's network. DLP solutions can detect and block the transmission of sensitive information, such as PII, through various channels, including email, web uploads, removable devices, and more.
An organization conducted a web application vulnerability assessment against the corporate website, and the following output was observed:
A
Set an HttpOnly flag to force communication by HTTPS
B
Block requests without an X-Frame-Options header
C
Configure an Access-Control-Allow-Origin header to authorized domains
D
Disable the cross-origin resource sharing header
Correct Answer:
C. Configure an Access-Control-Allow-Origin header to authorized domains
Explanation:
Configure an Access-Control-Allow-Origin header to authorized domains. Reference:
https://crashtest-security.com/cors-misconfiguration/#:~:text=commonly%20asked%20questions.-
,What%20is%20CORS%20Misconfiguration%
3F,the%20browsers%20of%20legitimate%20users.Troubleshooting and Solving CORS? https://www.linkedin.com/pulse/its-always-cors-problem-troubleshooting-solving-errors-carrubba-/
Which of the following items should be included in a vulnerability scan report?
A
Lessons learned
B
Service-level agreement
C
Playbook
D
Affected hosts
E
Risk score
F
Education plan
Correct Answer:
D. Affected hosts
Explanation:
D. Affected hosts: The vulnerability scan report should clearly list the hosts or systems that are affected by the identified vulnerabilities. This information is crucial for understanding the scope of the vulnerabilities and taking appropriate remediation actions. E. Risk score: Vulnerability scans often assign risk scores or severity ratings to each identified vulnerability. These scores help prioritize remediation efforts by indicating the potential impact and exploitability of the vulnerabilities. Including risk scores in the report provides an understanding of the relative severity of the identified vulnerabilities.
The Chief Executive Officer of an organization recently heard that exploitation of new attacks in the industry was happening approximately 45 days after a patch was released. Which of the following would best protect this organization?
A
A mean time to remediate of 30 days
B
A mean time to detect of 45 days
C
A mean time to respond of 15 days
D
Third-party application testing
Correct Answer:
C. A mean time to respond of 15 days
Explanation:
Key statement is "would best protect this organization" So the earlier a vulnerability is detected the better.
C. A mean time to respond of 15 days .A "mean time to respond" (MTTR) metric measures the average amount of time it takes for an organization to respond to and address security incidents, including applying patches. In this scenario, a mean time to respond of 15 days indicates that the organization is capable of responding to new vulnerabilities and applying patches within a relatively short timeframe.
A security analyst recently joined the team and is trying to determine which scripting language is being used in a production script to determine if it is malicious. Given the following script:
A
PowerShell
B
Ruby
C
Python
D
Shell script
Correct Answer:
A. PowerShell
Explanation:
The syntax in the given script, such as cmdlet names starting with "Get-", "Add-", "Set-", and the use of the pipeline "|", is characteristic of PowerShell scripting. Moreover, the use of Active Directory cmdlets like "Get- ADUser," "Add-ADGroupMember," and "Set-ADUser" indicates that this script is designed to interact with Active Directory, which aligns with PowerShell's primary use case in managing Windows environments and Active Directory services.
A company's user accounts have been compromised. Users are also reporting that the company's internal portal is sometimes only accessible through HTTP, other times; it is accessible through HTTPS. Which of the following most likely describes the observed activity?
A
There is an issue with the SSL certificate causing port 443 to become unavailable for HTTPS access
B
An on-path attack is being performed by someone with internal access that forces users into port 80
C
The web server cannot handle an increasing amount of HTTPS requests so it forwards users to port 80
D
An error was caused by BGP due to new rules applied over the company's internal routers
Correct Answer:
B. An on-path attack is being performed by someone with internal access that forces users into port 80
Explanation:
The observed activity most likely corresponds to:B. An on-path attack is being performed by someone with internal access that forces users into port 80.Explanation:The situation where users sometimes access the company's internal portal via HTTP (port 80) instead of HTTPS (port 443) suggests that there may be an active attacker within the internal network, performing a man-in-the-middle (MITM) or on-path attack.
A security analyst is tasked with prioritizing vulnerabilities for remediation. The relevant company security policies are shown below:
Security Policy 1006: Vulnerability Management
1. The Company shall use the CVSSv3.1 Base Score Metrics (Exploitability and Impact) to prioritize the remediation of security vulnerabilities.
2. In situations where a choice must be made between confidentiality and availability, the Company shall prioritize confidentiality of data over availability of systems and data.
3. The Company shall prioritize patching of publicly available systems and services over patching of internally available system.
According to the security policy, which of the following vulnerabilities should be the highest priority to patch?
A
Name: THOR.HAMMER - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Internal System
B
Name: CAP.SHIELD -
CVSS 3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
External System
C
Name: LOKI.DAGGER - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
External System
D
Name: THANOS.GAUNTLET - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Internal System
Correct Answer:
B. Name: CAP.SHIELD -
CVSS 3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
External System
Explanation:
Based on the security policy and the CVSSv3.1 Base Scores, vulnerability B (CAP.SHIELD) with a high impact on confidentiality should be the highest priority to patch. It is an externally accessible system, and since confidentiality takes precedence over availability, it should be addressed before other vulnerabilities.
Which of the following will most likely ensure that mission-critical services are available in the event of an incident?
A
Business continuity plan
B
Vulnerability management plan
C
Disaster recovery plan
D
Asset management plan
Correct Answer:
A. Business continuity plan
Explanation:
The correct answer be A Business continuity focuses on keeping the business operational during a disaster, while disaster recovery focuses on restoring access to data and IT infrastructure after a disaster. A company's business continuity planning should be the foundation of its disaster planning, so it should precede disaster recovery planning.
The Chief Information Security Officer wants to eliminate and reduce shadow IT in the enterprise. Several high-risk cloud applications are used that increase the risk to the organization. Which of the following solutions will assist in reducing the risk?
A
Deploy a CASB and enable policy enforcement
B
Configure MFA with strict access
C
Deploy an API gateway
D
Enable SSO to the cloud applications
Correct Answer:
A. Deploy a CASB and enable policy enforcement
Explanation:
To reduce the risk associated with shadow IT and high-risk cloud applications, the most effective solution is:A. Deploy a CASB (Cloud Access Security Broker) and enable policy enforcement.A CASB is a specialized security solution designed to provide visibility and control over the use of cloud applications and services within an organization. It helps organizations identify and manage shadow IT by monitoring and controlling access to cloud applications.
Questions: 1-10 out of 225
Continue Full Practice..
GET ALL 225 QUESTIONS