CS0-003 Practice Test

CS0-003 Practice Test practice questions, page 25 of 26, with answer review and explanations.

Question 121

A company is deploying new vulnerability scanning software to assess its systems. The current network is highly segmented, and the networking team wants to minimize the number of unique firewall rules. Which of the following scanning techniques would be most efficient to achieve the objective?

  1. Deploy agents on all systems to perform the scans
  2. Deploy a central scanner and perform non-credentialed scans
  3. Deploy a cloud-based scanner and perform a network scan
  4. Deploy a scanner sensor on every segment and perform credentialed scans

Question 122

Executives at an organization email sensitive financial information to external business partners when negotiating valuable contracts. To ensure the legal validity of these messages, the cybersecurity team recommends a digital signature be added to emails sent by the executives. Which of the following are the primary goals of this recommendation? (Choose two.)

  1. Confidentiality
  2. Integrity
  3. Privacy
  4. Anonymity
  5. Non-reduplication
  6. Authorization

Question 123

A security administrator needs to import PII data records from the production environment to the test environment for testing purposes. Which of the following would best protect data confidentiality?

  1. Data masking
  2. Hashing
  3. Watermarking
  4. Encoding

Question 124

The email system administrator for an organization configured DKIM signing for all email legitimately sent by the organization. Which of the following would most likely indicate an email is malicious if the company's domain name is used as both the sender and the recipient?

  1. The message fails a DMARC check
  2. The sending IP address is the hosting provider
  3. The signature does not meet corporate standards
  4. The sender and reply address are different

Question 125

During an incident involving phishing, a security analyst needs to find the source of the malicious email. Which of the following techniques would provide the analyst with this information?

  1. Header analysis
  2. Packet capture
  3. SSL inspection
  4. Reverse engineering