CompTIA CS0-001 問題集

質問 1：
A security analyst has performed various scans and found vulnerabilities in several applications that affect production data. Remediation of all exploits may cause certain applications to no longer work. Which of the following activities would need to be conducted BEFORE remediation?
A. Change control
B. Sandboxing
C. Input validation
D. Fuzzing
正解：A

質問 2：
A security analyst determines that several workstations are reporting traffic usage on port 3389. All workstations are running the latest OS patches according to patch reporting. The help desk manager reports some users are getting logged off of their workstations, and network access is running slower than normal. The analyst believes a zero-day threat has allowed remote attackers to gain access to the workstations. Which of the following are the BEST steps to stop the threat without impacting all services? (Choose two.)
A. Enforce a password change for users on the network.
B. Change the public NAT IP address since APTs are common.
C. Disconnect public Internet access and review the logs on the workstations.
D. Route internal traffic through a proxy server.
E. Configure a group policy to disable RDP access.
F. Reapply the latest OS patches to workstations.
正解：A,E

質問 3：
An analyst is detecting Linux machines on a Windows network. Which of the following tools should be used to detect a computer operating system?
A. nslookup
B. whois
C. nmap
D. netstat
正解：C

質問 4：
A cybersecurity analyst is reviewing the current BYOD security posture. The users must be able to synchronize their calendars, email, and contacts to a smartphone or other personal device. The recommendation must provide the most flexibility to users. Which of the following recommendations would meet both the mobile data protection efforts and the business requirements described in this scenario?
A. Implement a wireless network configured for mobile device access and monitored by sensors.
B. Deploy a kiosk for synchronizing while using an access list of approved users.
C. Develop a minimum security baseline while restricting the type of data that can be accessed.
D. Implement a single computer configured with USB access and monitored by sensors.
正解：A

質問 5：
An organization has recently experienced a data breach. A forensic analysis confirmed the attacker found a legacy web server that had not been used in over a year and was not regularly patched. After a discussion with the security team, management decided to initiate a program of network reconnaissance and penetration testing. They want to start the process by scanning the network for active hosts and open ports. Which of the following tools is BEST suited for this job?
A. Netstat
B. Ping
C. ifconfig
D. L0phtCrack
E. Nmap
F. Wireshark
正解：E

質問 6：
An analyst performed the following activities:
1. Review the security logs.
2. Install a surveillance camera.
3. Analyst trend reports.
Which of the following job responsibilities is the analyst performing? (select TWO.)
A. Implement network devices
B. Detect a security incident.
C. Encrypt the devices.
D. Prevent unauthorized access.
E. Reduce attack surface of the system.
F. Implement monitoring controls
正解：D,F

質問 7：
A manufacturing company has decided to participate in direct sales of its products to consumers. The company decides to use a subdomain of its main site with its existing cloud service provider as the portal for e-commerce. After launch, the site is stable and functions properly, but after a robust day of sales, the site begins to redirect to a competitor's landing page. Which of the following actions should the company's security team take to determine the cause of the issue and minimize the scope of impact?
A. Check the DNS records to ensure a correct MX record is established for the subdomain
B. Check DNS records to ensure Cname or alias records are in place for the subdomain
C. Query the cloud provider to determine the nature of the DNS attack and find out which other clients are affected
D. Engage a third party to provide penetration testing services to see if an exploit can be found
正解：C