CS0-003 Practice Test

CS0-003 Practice Test practice questions, page 16 of 26, with answer review and explanations.

Question 76

Given the following CVSS string: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Which of the following attributes correctly describes this vulnerability?

  1. A user is required to exploit this vulnerability.
  2. The vulnerability is network based.
  3. The vulnerability does not affect confidentiality.
  4. The complexity to exploit the vulnerability is high.

Question 77

A cryptocurrency service company is primarily concerned with ensuring the accuracy of the data on one of its systems. A security analyst has been tasked with prioritizing vulnerabilities for remediation for the system. The analyst will use the following CVSSv3.1 impact metrics for prioritization: Which of the following vulnerabilities should be prioritized for remediation?

  1. 1
  2. 2
  3. 3
  4. 4

Question 78

Patches for two highly exploited vulnerabilities were released on the same Friday afternoon. Information about the systems and vulnerabilities is shown in the tables below: Which of the following should the security analyst prioritize for remediation?

  1. rogers
  2. brady
  3. brees
  4. manning

Question 79

A security analyst must preserve a system hard drive that was involved in a litigation request. Which of the following is the best method to ensure the data on the device is not modified?

  1. Generate a hash value and make a backup image.
  2. Encrypt the device to ensure confidentiality of the data.
  3. Protect the device with a complex password.
  4. Perform a memory scan dump to collect residual data

Question 80

Which of the following best describes the goal of a tabletop exercise?

  1. To test possible incident scenarios and how to react properly
  2. To perform attack exercises to check response effectiveness
  3. To understand existing threat actors and how to replicate their techniques
  4. To check the effectiveness of the business continuity plan