CS0-003 Practice Test

Review 641 CS0-003 practice questions with answer explanations and community insights.

Question 1

A recent zero-day vulnerability is being actively exploited, requires no user interaction or privilege escalation, and has a significant impact to confidentiality and integrity but not to availability. Which of the following CVE metrics would be most accurate for this zero-day threat?

  1. CVSS:31/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:K/A:L
  2. CVSS:31/AV:K/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:L
  3. CVSS:31/AV:N/AC:L/PR:N/UI:H/S:U/C:L/I:N/A:H
  4. CVSS:31/AV:L/AC:L/PR:R/UI:R/S:U/C:H/I:L/A:H

Question 2

Which of the following tools would work best to prevent the exposure of PII outside of an organization?

  1. PAM
  2. IDS
  3. PKI
  4. DLP

Question 3

An organization conducted a web application vulnerability assessment against the corporate website, and the following output was observed: Which of the following tuning recommendations should the security analyst share?

  1. Set an HttpOnly flag to force communication by HTTPS
  2. Block requests without an X-Frame-Options header
  3. Configure an Access-Control-Allow-Origin header to authorized domains
  4. Disable the cross-origin resource sharing header

Question 4

Which of the following items should be included in a vulnerability scan report? (Choose two.)

  1. Lessons learned
  2. Service-level agreement
  3. Playbook
  4. Affected hosts
  5. Risk score
  6. Education plan

Question 5

The Chief Executive Officer of an organization recently heard that exploitation of new attacks in the industry was happening approximately 45 days after a patch was released. Which of the following would best protect this organization?

  1. A mean time to remediate of 30 days
  2. A mean time to detect of 45 days
  3. A mean time to respond of 15 days
  4. Third-party application testing