CS0-002 practice questions, page 16 of 17, with answer review and explanations.
Question 76
A company recently experienced a breach of sensitive information that affects customers across multiple geographical regions. Which of the following roles would be BEST suited to determine the breach notification requirements?
Legal counsel
Chief Security Officer
Human resources
Law enforcement
Question 77
A security analyst identified some potentially malicious processes after capturing the contents of memory from a machine during incident response. Which of the following procedures is the NEXT step for further investigation?
Data carving
Timeline construction
File cloning
Reverse engineering
Question 78
Understanding attack vectors and integrating intelligence sources are important components of:
a vulnerability management plan.
proactive threat hunting.
risk management compliance.
an incident response plan.
Question 79
A business recently acquired a software company. The software company's security posture is unknown. However, based on an initial assessment, there are limited security controls. No significant security monitoring exists. Which of the following is the NEXT step that should be completed to obtain information about the software company's security posture?
Develop an asset inventory to determine the systems within the software company.
Review relevant network drawings, diagrams, and documentation.
Perform penetration tests against the software company's internal and external networks.
Baseline the software company's network to determine the ports and protocols in use.
Question 80
A security analyst identified one server that was compromised and used as a data mining machine, and a clone of the hard drive that was created. Which of the following will MOST likely provide information about when and how the machine was compromised and where the malware is located?