CS0-002

CS0-002 practice questions, page 15 of 17, with answer review and explanations.

Question 71

Which of the following allows Secure Boot to be enabled?

  1. eFuse
  2. UEFI
  3. HSM
  4. PAM

Question 72

A company stores all of its data in the cloud. All company-owned laptops are currently unmanaged, and all users have administrative rights. The security team is having difficulty identifying a way to secure the environment. Which of the following would be the BEST method to protect the company's data?

  1. Implement UEM on all systems and deploy security software.
  2. Implement DLP on all workstations and block company data from being sent outside the company.
  3. Implement a CASB and prevent certain types of data from being downloaded to a workstation.
  4. Implement centralized monitoring and logging for all company systems.

Question 73

A security analyst is reviewing a vulnerability scan report and notes the following finding: As part of the detection and analysis procedures, which of the following should the analyst do NEXT?

  1. Patch or reimage the device to complete the recovery.
  2. Restart the antiviruses running processes.
  3. Isolate the host from the network to prevent exposure.
  4. Confirm the workstation's signatures against the most current signatures.

Question 74

After a remote command execution incident occurred on a web server, a security analyst found the following piece of code in an XML file: Which of the following is the BEST solution to mitigate this type of attack?

  1. Implement a better level of user input filters and content sanitization.
  2. Properly configure XML handlers so they do not process &ent parameters coming from user inputs.
  3. Use parameterized queries to avoid user inputs from being processed by the server.
  4. Escape user inputs using character encoding conjoined with whitelisting.

Question 75

A security analyst is generating a list of recommendations for the company's insecure API. Which of the following is the BEST parameter mitigation recommendation?

  1. Use TLS for all data exchanges.
  2. Use effective authentication and authorization methods.
  3. Implement parameterized queries.
  4. Validate all incoming data.