Free CompTIA CS0-001 Exam Dumps Questions & Answers

A web developer wants to create a new web part within the company website that aggregates sales from individual team sites. A cybersecurity analyst wants to ensure security measurements are implemented during this process. Which of the following remediation actions should the analyst take to implement a vulnerability management process?

• A.  Change management
• B.  Vulnerability scan
• C.  Personnel training
• D.  Sandboxing

The Chief Information Security Officer (CISO) asked for a topology discovery to be conducted and verified against the asset inventory. The discovery is failing and not providing reliable or complete data. The syslog shows the following information:

Which of the following describes the reason why the discovery is failing?

• A.  The connection to the LDAP server is timing out.
• B.  The scanning tool lacks valid LDAP credentials.
• C.  The scan is returning LDAP error code 52255a.
• D.  The server running LDAP has antivirus deployed.
• E.  The LDAP server is configured on the wrong port.

An organization uses Common Vulnerability Scoring System (CVSS) scores to prioritize remediation of vulnerabilities.
Management wants to modify the priorities based on a difficulty factor so that vulnerabilities with lower CVSS scores may get a higher priority if they are easier to implement with less risk to system functionality. Management also wants to quantify the priority. Which of the following would achieve management's objective?

• A.  (CVSS Score) / Difficulty = PriorityWhere Difficulty is a range from 1 to 10 with 10 being easiest and lowest risk to implement
• B.  (CVSS Score) * Difficulty = PriorityWhere Difficulty is a range from 0.1 to 1.0 with 1.0 being easiest and lowest risk to implement
• C.  ((CVSS Score) * 2) / Difficulty = PriorityWhere CVSS Score is weighted and Difficulty is a range from 1 to 5 with 5 being easiest and lowest risk to implement
• D.  (CVSS Score) * Difficulty = PriorityWhere Difficulty is a range from 1 to 5 with 1 being easiest and lowest risk to implement

A cybersecurity analyst is conducting a security test to ensure that information regarding the web server is protected from disclosure. The cybersecurity analyst requested an HTML file from the web server, and the response came back as follows:

Which of the following actions should be taken to remediate this security issue?

• A.  Set "Perprocesslogging" to 1 in the URLScan.ini configuration file.
• B.  Set "Removeserverheader" to 1 in the URLScan.ini configuration file.
• C.  Set "Enablelogging" to 0 in the URLScan.ini configuration file.
• D.  Set "Allowlatescanning" to 1 in the URLScan.ini configuration file.

An analyst was tasked with providing recommendations of technologies that are PKI X.509 compliant for a variety of secure functions. Which of the following technologies meet the compatibility requirement? (Select three.)

• A.  PKCS
• B.  AES
• C.  SSL/TLS
• D.  TEMPEST
• E.  PGP
• F.  IDEA
• G.  3DES