Question 1

A small company does no! have enough staff to effectively segregate duties to prevent error and fraud in payroll management. The Chief Information Security Officer (CISO) decides to maintain and review logs and audit trails to mitigate risk. Which of the following did the CISO implement?

Options :

A : Corrective controls

B : Compensating controls

C : Operational controls

D : Administrative controls

Answer: B

Question 2

An employee accessed a website that caused a device to become infected with invasive malware. The incident

response analyst has:

• created the initial evidence log.

• disabled the wireless adapter on the device.

• interviewed the employee, who was unable to identify the website that was accessed

• reviewed the web proxy traffic logs.

Which of the following should the analyst do to remediate the infected device?

Options :

A : Update the system firmware and reimage the hardware.

B : Install an additional malware scanner that will send email alerts to the analyst.

C : Configure the system to use a proxy server for Internet access.

D : Delete the user profile and restore data from backup.

Answer: A

Question 3

A security analyst is validating a particular finding that was reported in a web application vulnerability scan to make sure it is not a false positive. The security analyst uses the snippet below:

Which of the following vulnerability types is the security analyst validating?

Options :

A : Directory traversal

B : XSS

C : XXE

D : SSRF

Answer: B

Question 4

A security analyst found the following vulnerability on the company’s website:

Which of the following should be implemented to prevent this type of attack in the future?

Options :

A : Input sanitization

B : Output encoding

C : Code obfuscation

D : Prepared statements

Answer: A

Question 5

A cybersecurity analyst is doing triage in a SIEM and notices that the time stamps between the firewall and the host under investigation are off by 43 minutes. Which of the following is the most likely scenario occurring with the time stamps?

Options :

A : The NTP server is not configured on the host.

B : The cybersecurity analyst is looking at the wrong information.

C : The firewall is using UTC time.

D : The host with the logs is offline.

Answer: A

Free CS0-003 Mock Exam – Practice Online Confidently

Buying Options: