Free Curam Software CS0-003 Exam Dumps Questions & Answers

A report contains IoC and TTP information for a zero-day exploit that leverages vulnerabilities in a specific version of a web application. Which of the following actions should a SOC analyst take first after receiving the report?

• A.  Analyze the web application logs to identify any suspicious or malicious activity.
• B.  Block the IP addresses and domains from the report in the web proxy and firewalls.
• C.  Verify whether the information is relevant to the organization.
• D.  Implement a vulnerability scan to determine whether the environment is at risk.

Results of a SOC customer service evaluation indicate high levels of dissatisfaction with the inconsistent services provided after regular work hours. To address this, the SOC lead drafts a document establishing customer expectations regarding the SOC ' s performance and quality of services. Which of the following documents most likely fits this description?

• A.  Service-level agreement
• B.  Risk management plan
• C.  Vendor agreement
• D.  Incident response plan

During an incident, some loCs of possible ransomware contamination were found in a group of servers in a segment of the network. Which of the following steps should be taken next?

• A.  Reimaging
• B.  Remediation
• C.  Preservation
• D.  Isolation

Which of the following best describes the goal of a tabletop exercise?

• A.  To check the effectiveness of the business continuity plan
• B.  To test possible incident scenarios and how to react properly
• C.  To perform attack exercises to check response effectiveness
• D.  To understand existing threat actors and how to replicate their techniques

A vulnerability analyst is writing a report documenting the newest, most critical vulnerabilities identified in the past month. Which of the following public MITRE repositories would be best to review?

• A.  Cyber Analytics Repository
• B.  Cyber Threat Intelligence
• C.  ATT & CK
• D.  Common Vulnerabilities and Exposures