CS0-002

CS0-002 practice questions, page 12 of 17, with answer review and explanations.

Question 56

Which of the following threat classifications would MOST likely use polymorphic code?

  1. Known threat
  2. Zero-day threat
  3. Unknown threat
  4. Advanced persistent threat

Question 57

A company has a cluster of web servers that is critical to the business. A systems administrator installed a utility to troubleshoot an issue, and the utility caused the entire cluster to go offline. Which of the following solutions would work BEST prevent to this from happening again?

  1. Change management
  2. Application whitelisting
  3. Asset management
  4. Privilege management

Question 58

An analyst must review a new cloud-based SIEM solution. Which of the following should the analyst do FIRST prior to discussing the company's needs?

  1. Check industry news feeds for product reviews.
  2. Ensure a current non-disclosure agreement is on file.
  3. Perform a vulnerability scan against a test instance.
  4. Download the product security white paper.

Question 59

A small organization has proprietary software that is used internally. The system has not been well maintained and cannot be updated with the rest of the environment. Which of the following is the BEST solution?

  1. Virtualize the system and decommission the physical machine.
  2. Remove it from the network and require air gapping.
  3. Implement privileged access management for identity access.
  4. Implement MFA on the specific system.

Question 60

A SIEM analyst receives an alert containing the following URL: http:/companywebsite.com/displayPicture?filenamE=../../../../etc/passwd Which of the following BEST describes the attack?

  1. Password spraying
  2. Buffer overflow
  3. Insecure object access
  4. Directory traversal