CS0-002

CS0-002 practice questions, page 9 of 17, with answer review and explanations.

Question 41

The SOC has received reports of slowness across all workstation network segments. The currently installed antivirus has not detected anything, but a different anti-malware product was just downloaded and has revealed a worm is spreading. Which of the following should be the NEXT step in this incident response?

  1. Send a sample of the malware to the antivirus vendor and request urgent signature creation.
  2. Begin deploying the new anti-malware on all uninfected systems.
  3. Enable an ACL on all VLANs to contain each segment.
  4. Compile a list of IoCs so the IPS can be updated to halt the spread.

Question 42

A vulnerability assessment solution is hosted in the cloud. This solution will be used as an accurate inventory data source for both the configuration management database and the governance, risk, and compliance tool. An analyst has been asked to automate the data acquisition. Which of the following would be the BEST way to acquire the data?

  1. CSV export
  2. SOAR
  3. API
  4. Machine learning

Question 43

Which of the following is MOST closely related to the concept of privacy?

  1. The implementation of confidentiality, integrity, and availability
  2. A system's ability to protect the confidentiality of sensitive information
  3. An individual's control over personal information
  4. A policy implementing strong identity management processes

Question 44

An organization is focused on restructuring its data governance programs, and an analyst has been tasked with surveying sensitive data within the organization. Which of the following is the MOST accurate method for the security analyst to complete this assignment?

  1. Perform an enterprise-wide discovery scan.
  2. Consult with an internal data custodian.
  3. Review enterprise-wide asset inventory.
  4. Create a survey and distribute it to data owners.

Question 45

Which of the following is the BEST security practice to prevent ActiveX controls from running malicious code on a user's web application?

  1. Deploying HIPS to block malicious ActiveX code
  2. Installing network-based IPS to block malicious ActiveX code
  3. Adjusting the web-browser settings to block ActiveX controls
  4. Configuring a firewall to block traffic on ports that use ActiveX controls