CS0-003 Practice Test

CS0-003 Practice Test practice questions, page 10 of 26, with answer review and explanations.

Question 46

A security analyst is performing an investigation involving multiple targeted Windows malware binaries. The analyst wants to gather intelligence without disclosing information to the attackers. Which of the following actions would allow the analyst to achieve the objective?

  1. Upload the binary to an air gapped sandbox for analysis
  2. Send the binaries to the antivirus vendor
  3. Execute the binaries on an environment with internet connectivity
  4. Query the file hashes using VirusTotal

Question 47

Which of the following would help to minimize human engagement and aid in process improvement in security operations?

  1. OSSTMM
  2. SIEM
  3. SOAR
  4. OWASP

Question 48

After conducting a cybersecurity risk assessment for a new software request, a Chief Information Security Officer (CISO) decided the risk score would be too high. The CISO refused the software request. Which of the following risk management principles did the CISO select?

  1. Avoid
  2. Transfer
  3. Accept
  4. Mitigate

Question 49

Which of the following is an important aspect that should be included in the lessons-learned step after an incident?

  1. Identify any improvements or changes in the incident response plan or procedures
  2. Determine if an internal mistake was made and who did it so they do not repeat the error
  3. Present all legal evidence collected and turn it over to iaw enforcement
  4. Discuss the financial impact of the incident to determine if security controls are well spent

Question 50

The security operations team is required to consolidate several threat intelligence feeds due to redundant tools and portals. Which of the following will best achieve the goal and maximize results?

  1. Single pane of glass
  2. Single sign-on
  3. Data enrichment
  4. Deduplication