CS0-003 Practice Test practice questions, page 20 of 26, with answer review and explanations.
Question 96
A security analyst at a company called ACME Commercial notices there is outbound traffic to a host IP that resolves to https://office365password.acme.co. The site’s standard VPN logon page is www.acme.com/logon. Which of the following is most likely true?
This is a normal password change URL.
The security operations center is performing a routine password audit.
A new VPN gateway has been deployed.
A social engineering attack is underway.
Question 97
A security analyst is performing vulnerability scans on the network. The analyst installs a scanner appliance, configures the subnets to scan, and begins the scan of the network. Which of the following would be missing from a scan performed with this configuration?
Operating system version
Registry key values
Open ports
IP address
Question 98
A security analyst discovers an LFI vulnerability that can be exploited to extract credentials from the underlying host. Which of the following patterns can the security analyst use to search the web server logs for evidence of exploitation of that particular vulnerability?
/etc/shadow
curl localhost
; printenv
cat /proc/self/
Question 99
A company is in the process of implementing a vulnerability management program. Which of the following scanning methods should be implemented to minimize the risk of OT/ICS devices malfunctioning due to the vulnerability identification process?
Non-credentialed scanning
Passive scanning
Agent-based scanning
Credentialed scanning
Question 100
A company receives a penetration test report summary from a third party. The report summary indicates a proxy has some patches that need to be applied. The proxy is sitting in a rack and is not being used, as the company has replaced it with a new one. The CVE score of the vulnerability on the proxy is a 9.8. Which of the following best practices should the company follow with this proxy?