CS0-002

CS0-002 practice questions, page 7 of 17, with answer review and explanations.

Question 31

The IT department is concerned about the possibility of a guest device infecting machines on the corporate network or taking down the company's single Internet connection. Which of the following should a security analyst recommend to BEST meet the requirements outlined by the IT department?

  1. Require the guest machines to install the corporate-owned EDR solution
  2. Configure NAC to only allow machines on the network that are patched and have active antivirus
  3. Place a firewall in between the corporate network and the guest network
  4. Configure the IPS with rules that will detect common malware signatures traveling from the guest network

Question 32

Following a recent security breach, a company decides to investigate account usage to ensure privileged accounts are only being utilized during typical business hours. During the investigation, a security analyst determines an account was consistently utilized in the middle of the night. Which of the following actions should the analyst take NEXT?

  1. Disable the privileged account.
  2. Initiate the incident response plan.
  3. Report the discrepancy to human resources.
  4. Review the activity with the user.

Question 33

Which of the following are reasons why consumer IoT devices should be avoided in an enterprise environment? (Choose two.)

  1. Message queuing telemetry transport does not support encryption.
  2. The devices may have weak or known passwords.
  3. The devices may cause a dramatic increase in wireless network traffic.
  4. The devices may utilize unsecure network protocols.
  5. Multiple devices may interfere with the functions of other IoT devices.
  6. The devices are not compatible with TLS 1.2.

Question 34

In response to an audit finding, a company's Chief Information Officer (CIO) instructed the security department to increase the security posture of the vulnerability management program. Currently, the company's vulnerability management program has the following attributes: ✑ It is unauthenticated. ✑ It is at the minimum interval specified by the audit framework. ✑ It only scans well-known ports. Which of the following would BEST increase the security posture of the vulnerability management program?

  1. Expand the ports being scanned to include all ports. Increase the scan interval to a number the business will accept without causing service interruption. Enable authentication and perform credentialed scans.
  2. Expand the ports being scanned to include all ports. Keep the scan interval at its current level. Enable authentication and perform credentialed scans.
  3. Expand the ports being scanned to include all ports. Increase the scan interval to a number the business will accept without causing service interruption. Continue unauthenticated scanning.
  4. Continue scanning the well-known ports. Increase the scan interval to a number the business will accept without causing service interruption. Enable authentication and perform credentialed scans.

Question 35

A financial organization has offices located globally. Per the organization's policies and procedures, all executives who conduct business overseas must have their mobile devices checked for malicious software or evidence of tampering upon their return. The information security department oversees this process, and no executive has had a device compromised. The Chief Information Security Officer wants to implement an additional safeguard to protect the organization's data. Which of the following controls would work BEST to protect the privacy of the data if a device is stolen?

  1. Implement a mobile device wiping solution for use if a device is lost or stolen.
  2. Install a DLP solution to track data flow.
  3. Install an encryption solution on all mobile devices.
  4. Train employees to report a lost or stolen laptop to the security department immediately.