CS0-002

CS0-002 practice questions, page 17 of 17, with answer review and explanations.

Question 81

A security analyst is researching ways to improve the security of a company's email system to mitigate emails that are impersonating company executives. Which of the following would be BEST for the analyst to configure to achieve this objective?

  1. A TXT record on the name server for SPF
  2. DNSSEC keys to secure replication
  3. Domain Keys Identified Mail
  4. A sandbox to check incoming mail

Question 82

During an investigation, a security analyst determines suspicious activity occurred during the night shift over the weekend. Further investigation reveals the activity was initiated from an internal IP going to an external website. Which of the following would be the MOST appropriate recommendation to prevent similar activity from happening in the future?

  1. An IPS signature modification for the specific IP addresses
  2. An IDS signature modification for the specific IP addresses
  3. A firewall rule that will block port 80 traffic
  4. Implement a web proxy to restrict malicious web content

Question 83

A company frequently experiences issues with credential stuffing attacks. Which of the following is the BEST control to help prevent these attacks from being successful?

  1. SIEM
  2. IDS
  3. MFA
  4. TLS

Question 84

Company A is in the process of merging with Company B. As part of the merger, connectivity between the ERP systems must be established so pertinent financial information can be shared between the two entities. Which of the following will establish a more automated approach to secure data transfers between the two entities?

  1. Set up an FTP server that both companies can access and export the required financial data to a folder.
  2. Set up a VPN between Company A and Company B, granting access only to the ERPs within the connection.
  3. Set up a PKI between Company A and Company B and intermediate shared certificates between the two entities.
  4. Create static NATs on each entity's firewalls that map to the ERR systems and use native ERP authentication to allow access.