CS0-004 Practice Test

CS0-004 Practice Test practice questions, page 2 of 4, with answer review and explanations.

Question 6

A public threat intelligence report includes indicators of compromise (IoCs) for threat actors. The threat actors are exploiting a zero-day vulnerability that the vendor has not fixed. Which of the following techniques should be used until a patch is available?

  1. Sinkholing
  2. Eradication techniques
  3. Continuous monitoring
  4. Evidence acquisition

Question 7

The Chief Information Security Officer wants to improve internal security measures by continuously validating and verifying access to the production environment. Which of the following concepts best describes this practice?

  1. Secure access service edge
  2. Next-generation firewall
  3. Zero Trust
  4. Privileged access management

Question 8

Which of the following allows an organization to leverage AI in various forms while protecting business objectives and data?

  1. Usage policies
  2. Prompt engineering
  3. Non-disclosure agreement
  4. Incident response policy

Question 9

A security operations center analyst is using the command line to display specific traffic. The analyst uses the following command: $tshark -r file.pcap -Y "http or udp" Which of the following will the command line display?

  1. Encrypted web requests and Domain Name System (DNS) traffic
  2. Unencrypted web requests and DNS traffic
  3. Neither encrypted nor unencrypted web and DNS traffic
  4. Both encrypted and unencrypted web and DNS traffic

Question 10

Which of the following network architectures would best implement a perimeter-less network topology?

  1. Hybrid cloud networks
  2. Secure access service edge
  3. Cloud-native computing
  4. Content delivery networks