Free CompTIA CS0-002 Exam Dumps Questions & Answers

A user reports a malware alert to the help desk. A technician verities the alert, determines the workstation is classified as a low-severity device, and uses network controls to block access. The technician then assigns the ticket to a security analyst who will complete the eradication and recovery processes. Which of the following should the security analyst do next?

• A.  Reverse engineer the malware to determine its purpose and risk to the organization.
• B.  Isolate the workstation and issue a new computer to the user.
• C.  Document the procedures and walk through the incident training guide.
• D.  Sanitize the workstation and verify countermeasures are restored.

A company is experiencing a malware attack within its network. A security engineer notices many of the impacted assets are connecting outbound to a number of remote destinations and exfiltrating dat a. The security engineer also see that deployed, up-to-date antivirus signatures are ineffective. Which of the following is the BEST approach to prevent any impact to the company from similar attacks in the future?

• A.  Sinkholing
• B.  Port security
• C.  IDS signatures
• D.  Data loss prevention

An internally developed file-monitoring system identified the following except as causing a program to crash often:

Which of the following should a security analyst recommend to fix the issue?

• A.  Open the access.log file ri read/write mode.
• B.  Perform input samtizaton
• C.  Replace the strcpv function.
• D.  Increase the size of the file data buffer

The help desk is having difficulty keeping up with all onboarding and offboarding requests. Managers often submit, requests for new users at the last minute. causing the help desk to scramble to create accounts across many different Interconnected systems. Which of the following solutions would work BEST to assist the help desk with the onboarding and offboarding process while protecting the company's assets?

• A.  MFA
• B.  RBAC
• C.  CASB
• D.  SSO

A security technician configured a NIDS to monitor network traffic. Which of the following is a condition in which harmless traffic is classified as a potential network attack?

• A.  True negative
• B.  False negative
• C.  False positive
• D.  True positive