Free CompTIA CS0-002 Exam Dumps Questions & Answers

A team of network security analysts is examining network traffic to determine if sensitive data was exfiltrated. Upon further investigation, the analysts believe confidential data was compromised. Which of the following capabilities would BEST defend against this type of sensitive data exfiltration?

• A.  Deploy EDR.
• B.  Encrypt the hard drives
• C.  Deploy an edge firewall.
• D.  Implement DLP

A security analyst is monitoring a company's network traffic and finds ping requests going to accounting and human resources servers from a SQL server. Upon investigation, the analyst discovers a technician responded to potential network connectivity issues. Which of the following is the best way for the security analyst to respond?

• A.  Implement host-based firewalls on all systems to prevent ping sweeps in the future.
• B.  Isolate the system and begin a forensic investigation to determine what was compromised.
• C.  Recommend network segmentation to the management team as a way to secure the various environments.
• D.  Report this activity as a false positive, as the activity is legitimate.

A security analyst identified one server that was compromised and used as a data making machine, and a few of the hard drive that was created. Which of the following will MOST likely provide information about when and how the machine was compromised and where the malware is located?

• A.  Data carving
• B.  Volatile memory analysts
• C.  System timeline reconstruction
• D.  System registry extraction

A small organization has proprietary software that is used internally. The system has not been wen maintained and cannot be updated with the rest or the environment. Which of the following is the BEST solution?

• A.  virtualize the system and decommission the physical machine.
• B.  Implement MFA on the specific system.
• C.  Remove it from the network and require air gapping.
• D.  Implement privileged access management for identity access.

A Chief Information Secunty Officer has asked for a list of hosts that have critical and high-seventy findings as referenced in the CVE database. Which of the following tools would produce the assessment output needed to satisfy this request?

• A.  Fuzzer
• B.  Nessus
• C.  Prowler
• D.  Wireshark
• E.  Nikto