CS0-002

CS0-002 practice questions, page 4 of 17, with answer review and explanations.

Question 16

A security analyst is performing a Diamond Model analysis of an incident the company had last quarter. A potential benefit of this activity is that it can identify:

  1. detection and prevention capabilities to improve.
  2. which systems were exploited more frequently.
  3. possible evidence that is missing during forensic analysis.
  4. which analysts require more training.
  5. the time spent by analysts on each of the incidents.

Question 17

An IT security analyst has received an email alert regarding a vulnerability within the new fleet of vehicles the company recently purchased. Which of the following attack vectors is the vulnerability MOST likely targeting?

  1. SCADA
  2. CAN bus
  3. Modbus
  4. IoT

Question 18

An internally developed file-monitoring system identified the following excerpt as causing a program to crash often: char filedata[100]; fp = fopen(`access.log`, `r`); srtcopy (filedata, fp); printf (`%s\n`, filedata); Which of the following should a security analyst recommend to fix the issue?

  1. Open the access.log file in read/write mode.
  2. Replace the strcpy function.
  3. Perform input sanitization.
  4. Increase the size of the file data butter.

Question 19

A company's legal and accounting teams have decided it would be more cost-effective to offload the risks of data storage to a third party. The IT management team has decided to implement a cloud model and has asked the security team for recommendations. Which of the following will allow all data to be kept on the third-party network?

  1. VDI
  2. SaaS
  3. CASB
  4. FaaS

Question 20

A security analyst discovers suspicious host activity while performing monitoring activities. The analyst pulls a packet capture for the activity and sees the following: Follow TCP stream: Which of the following describes what has occurred?

  1. The host attempted to download an application from utoftor.com.
  2. The host downloaded an application from utoftor.com.
  3. The host attempted to make a secure connection to utoftor.com.
  4. The host rejected the connection from utoftor.com.