CS0-002 practice questions, page 8 of 17, with answer review and explanations.
Question 36
A software development team asked a security analyst to review some code for security vulnerabilities. Which of the following would BEST assist the security analyst while performing this task?
Static analysis
Dynamic analysis
Regression testing
User acceptance testing
Question 37
A security analyst inspects the header of an email that is presumed to be malicious and sees the following: Which of the following is inconsistent with the rest of the header and should be treated as suspicious?
The use of a TLS cipher
The sender's email address
The destination email server
The subject line
Question 38
A team of network security analysts is examining network traffic to determine if sensitive data was exfiltrated. Upon further investigation, the analysts believe confidential data was compromised. Which of the following capabilities would BEST defend against this type of sensitive data exfiltration?
Deploy an edge firewall.
Implement DLP.
Deploy EDR.
Encrypt the hard drives.
Question 39
After a series of Group Policy Object updates, multiple services stopped functioning. The systems administrator believes the issue resulted from a Group Policy Object update but cannot validate which update caused the issue. Which of the following security solutions would resolve this issue?
Privilege management
Group Policy Object management
Change management
Asset management
Question 40
Which of the following describes the main difference between supervised and unsupervised machine-learning algorithms that are used in cybersecurity applications?
Supervised algorithms can be used to block attacks, while unsupervised algorithms cannot.
Supervised algorithms require security analyst feedback, while unsupervised algorithms do not.
Unsupervised algorithms are not suitable for IDS systems, while supervised algorithms are.
Unsupervised algorithms produce more false positives than supervised algorithms.