Question 1

An incident response team found IoCs in a critical server. The team needs to isolate and collect technical evidence for further investigation. Which of the following pieces of data should be collected first in order to preserve sensitive information before isolating the server?

Options :

A : Hard disk

B : Primary boot partition

C : Malicious files

D : Routing table

E : Static IP address

Answer: C

Question 2

Which of the following best describes the goal of a disaster recovery exercise as preparation for possible incidents?

Options :

A : TO provide metrics and test continuity controls

B : To verify the roles of the incident response team

C : To provide recommendations for handling vulnerabilities

D : To perform tests against implemented security controls

Answer: A

Question 3

Which of the following does "federation" most likely refer to within the context of identity and access management?

Options :

A :

Facilitating groups of users in a similar function or profile to system access that requires elevated or conditional access

B :

An authentication mechanism that allows a user to utilize one set of credentials to access multiple domains

C :

Utilizing a combination of what you know, who you are, and what you have to grant authentication to a user

D : Correlating one-s identity with the attributes and associated applications the user has access to

Answer: B

Question 4

An analyst is designing a message system for a bank. The analyst wants to include a feature that allows the recipient of a message to prove to a third party that the message came from the sender Which of the following information security goals is the analyst most likely trying to achieve?

Options :

A : Non-repudiation

B : Authentication

C : Authorization

D : Integrity

Answer: A

Question 5

Which of the following best describes the process of requiring remediation of a known threat within a given

time frame?

Options :

A : SLA

B : MOU

C : Best-effort patching

D : Organizational governance

Answer: A

Free CS0-003 Mock Exam – Practice Online Confidently

Buying Options: