CompTIA CS0-001 問題集

質問 1：
An analyst is reviewing a list of vulnerabilities, which were reported from a recent vulnerability scan of a Linux server.
Which of the following is MOST likely to be a false positive?
A. GDI+ Remote Code Execution Vulnerability (MS08-052)
B. SSL Certificate Expiry
C. Apache HTTP Server Byte Range DoS
D. OpenSSH/OpenSSL Package Random Number Generator Weakness
E. HTTP TRACE / TRACK Methods Allowed (002-1208)
正解：A

質問 2：
A computer at a company was used to commit a crime. The system was seized and removed for further analysis. Which of the following is the purpose of labeling cables and connections when seizing the computer system?
A. To block any communication with the computer system from attack
B. To maintain the chain of custody
C. To capture the system configuration as it was at the time it was removed
D. To document the model, manufacturer, and type of cables connected
正解：B

質問 3：
A security analyst reported a cross-site request forgery vulnerability while reviewing a web application. Which of the following anti-forgery token implementation techniques would BEST help remediate the vulnerability without causing performance concerns?
A. Cookie
B. HTTP request
C. Session.
D. Time limited
正解：B

質問 4：
A technician receives a report that a user's workstation is experiencing no network connectivity. The technician investigates and notices the patch cable running the back of the user's VoIP phone is routed directly under the rolling chair and has been smashed flat over time.
Which of the following is the most likely cause of this issue?
A. Split pairs
B. Electromagnetic interference
C. Excessive collisions
D. Cross-talk
正解：C

質問 5：
You suspect that multiple unrelated security events have occurred on several nodes on a corporate network. You must review all logs and correlate events when necessary to discover each security event by clicking on each node. Only select corrective actions if the logs shown a security event that needs remediation. Drag and drop the appropriate corrective actions to mitigate the specific security event occurring on each affected device.
Instructions:
The Web Server, Database Server, IDS, Development PC, Accounting PC and Marketing PC are clickable. Some actions may not be required and each actions can only be used once per node. The corrective action order is not important. If at any time you would like to bring back the initial state of the simulation, please select the Reset button. When you have completed the simulation, please select the Done button to submit. Once the simulation is submitted, please select the Next button to continue.


正解：


質問 6：
A malicious user is reviewing the following output:
root:~#ping 192.168.1.137
64 bytes from 192.168.2.1 icmp_seq=1 ttl=63 time=1.58 ms
64 bytes from 192.168.2.1 icmp_seq=2 ttl=63 time=1.45 ms
root: ~#
Based on the above output, which of the following is the device between the malicious user and the target?
A. Hub
B. Proxy
C. Switch
D. Access point
正解：B

質問 7：
A corporation employs a number of small-form-factor workstations and mobile devices, and an incident response team is therefore required to build a forensics kit with tools to support chip-off analysis. Which of the following tools would BEST meet this requirement?
A. Last-level cache readers
B. Write-blockers
C. ZIF adapters
D. JTAG adapters
正解：D