CS0-003 Practice Test

CS0-003 Practice Test practice questions, page 6 of 26, with answer review and explanations.

Question 26

Which of the following is the first step that should be performed when establishing a disaster recovery plan?

  1. Agree on the goals and objectives of the plan
  2. Determine the site to be used during a disaster
  3. Demonstrate adherence to a standard disaster recovery process
  4. Identify applications to be run during a disaster

Question 27

A technician identifies a vulnerability on a server and applies a software patch. Which of the following should be the next step in the remediation process?

  1. Testing
  2. Implementation
  3. Validation
  4. Rollback

Question 28

The analyst reviews the following endpoint log entry: Which of the following has occurred?

  1. Registry change
  2. Rename computer
  3. New account introduced
  4. Privilege escalation

Question 29

A security program was able to achieve a 30% improvement in MTTR by integrating security controls into a SIEM. The analyst no longer had to jump between tools. Which of the following best describes what the security program did?

  1. Data enrichment
  2. Security control plane
  3. Threat feed combination
  4. Single pane of glass

Question 30

Due to reports of unauthorized activity that was occurring on the internal network, an analyst is performing a network discovery. The analyst runs an Nmap scan against a corporate network to evaluate which devices were operating in the environment. Given the following output: Which of the following choices should the analyst look at first?

  1. wh4dc-748gy.lan (192.168.86.152)
  2. officerokuplayer.lan (192.168.86.22)
  3. imaging.lan (192.168.86.150)
  4. xlaptop.lan (192.168.86.249)
  5. p4wnp1_aloa.lan (192.168.86.56)