Question 1

Which of the following describes the best reason for conducting a root cause analysis?

Options :

A : The root cause analysis ensures that proper timelines were documented.

B : The root cause analysis allows the incident to be properly documented for reporting.

C : The root cause analysis develops recommendations to improve the process.

D : The root cause analysis identifies the contributing items that facilitated the event

Answer: D

Question 2

A security administrator has been notified by the IT operations department that some vulnerability reports

contain an incomplete list of findings. Which of the following methods should be used to resolve

this issue?

Options :

A : Credentialed scan

B : External scan

C : Differential scan

D : Network scan

Answer: A

Question 3

A security analyst obtained the following table of results from a recent vulnerability assessment that was conducted against a single web server in the environment:

Which of the following should be completed first to remediate the findings?

Options :

A : Ask the web development team to update the page contents

B : Add the IP address allow listing for control panel access

C : Purchase an appropriate certificate from a trusted root CA

D : Perform proper sanitization on all fields

Answer: C

Question 4

After completing a review of network activity. the threat hunting team discovers a device on the network that sends an outbound email via a mail client to a non-company email address daily at 10:00 p.m. Which of the following is potentially occurring?

Options :

A : Irregular peer-to-peer communication

B : Rogue device on the network

C : Abnormal OS process behavior

D : Data exfiltration

Answer: D

Question 5

The security team reviews a web server for XSS and runs the following Nmap scan:

Which of the following most accurately describes the result of the scan?

Options :

A : An output of characters > and " as the parameters used m the attempt

B : The vulnerable parameter ID http://172.31.15.2/1.php?id-2 and unfiltered characters returned

C : The vulnerable parameter and unfiltered or encoded characters passed > and " as unsafe

D : The vulnerable parameter and characters > and " with a reflected XSS attempt

Answer: D

Free CS0-003 Mock Exam – Practice Online Confidently

Buying Options: