CompTIA CS0-002 問題集

質問 1：
Some hard disks need to be taken as evidence for further analysis during an incident response. Which of the following procedures must be completed FIRST for this type of evidence acquisition?
A. Execute the command #dd if-/dev/sda of=/dev/sdc bs=512 to clone the evidence data to external media to prevent any further change.
B. Extract the hard drives from the compromised machines and then plug them into a forensics machine to apply encryption over the stored data to protect it from nonauthorized access.
C. Perform a disk sanitization using the command #dd if=/dev/zero of=/dev/sdc bs=1M over the media that will receive a copy of the collected data.
D. Build the chain-of-custody document, noting the media model, serial number, size, vendor, date, and time of acquisition.
正解：D
解説: (Topexam メンバーにのみ表示されます)

質問 2：
A security analyst is reviewing WAF alerts and sees the following request:

Which of the following BEST describes the attack?
A. Denial of service
B. SQL injection
C. Command injection
D. LDAP injection
正解：B
解説: (Topexam メンバーにのみ表示されます)

質問 3：
An organization announces that all employees will need to work remotely for an extended period of time. All employees will be provided with a laptop and supported hardware to facilitate this requirement. The organization asks the information security division to reduce the risk during this time. Which of the following is a technical control that will reduce the risk of data loss if a laptop is lost or stolen?
A. Requiring the laptop to be locked in a cabinet when not in use
B. Requiring the use of the corporate VPN
C. Requiring full disk encryption
D. Requiring the screen to be locked after five minutes of inactivity
正解：C
解説: (Topexam メンバーにのみ表示されます)

質問 4：
A cybersecurity analyst routinely checks logs, querying for login attempts. While querying for unsuccessful login attempts during a five-day period, the analyst produces the following report:

Which of the following BEST describes what the analyst Just found?
A. Users 4 and 5 are using their credentials to run an unauthorized scheduled task targeting some servers In the cloud.
B. An unauthorized user is using login credentials in a script.
C. A bot is running a brute-force attack in an attempt to log in to the domain.
D. Users 4 and 5 are using their credentials to transfer files to multiple servers.
正解：B
解説: (Topexam メンバーにのみ表示されます)

質問 5：
As a proactive threat-hunting technique, hunters must develop situational cases based on likely attack scenarios derived from the available threat intelligence information. After forming the basis of the scenario, which of the following may the threat hunter construct to establish a framework for threat assessment?
A. Hypothesis
B. Attack profile
C. Threat vector
D. Critical asset list
正解：A
解説: (Topexam メンバーにのみ表示されます)

質問 6：
During the forensic analysis of a compromised machine, a security analyst discovers some binaries that are exhibiting abnormal behaviors. After extracting the strings, the analyst finds unexpected content. Which of the following is the next step the analyst should take?
A. Use file integrity monitoring to validate the digital signature
B. Validate the binaries' hashes from a trusted source.
C. Only allow binaries on the approve list to execute.
D. Run an antivirus against the binaries to check for malware.
正解：B
解説: (Topexam メンバーにのみ表示されます)

質問 7：
A cybersecurity analyst is concerned about attacks that use advanced evasion techniques. Which of the following would best mitigate such attacks?
A. Keeping IPS rules up to date
B. Updating the antivirus software
C. Installing a proxy server
D. Applying network segmentation
正解：A
解説: (Topexam メンバーにのみ表示されます)

質問 8：
A security analyst is reviewing the following server statistics:

Which of the following Is MOST likely occurring?
A. Resource exhaustion
B. VM escape
C. Privilege escalation
D. Race condition
正解：A
解説: (Topexam メンバーにのみ表示されます)

質問 9：
A code review reveals a web application is using lime-based cookies for session management. This is a security concern because lime-based cookies are easy to:
A. decode.
B. decrypt.
C. parameterize.
D. guess.
正解：A
解説: (Topexam メンバーにのみ表示されます)