Question 1

After completing a review of network activity. the threat hunting team discovers a device on the network that sends an outbound email via a mail client to a non-company email address daily at 10:00 p.m. Which of the following is potentially occurring?

Options :

A : Irregular peer-to-peer communication

B : Rogue device on the network

C : Abnormal OS process behavior

D : Data exfiltration

Answer: D

Question 2

Which of the following entities should an incident manager work with to ensure correct processes are adhered to when communicating incident reporting to the general public, as a best practice? (Select two).

Options :

A : Law enforcement

B : Governance

C : Legal

D : Manager

E : Public relations

F : Human resources

Answer: C,E

Question 3

A security analyst is performing an investigation involving multiple targeted Windows malware binaries. The analyst wants to gather intelligence without disclosing information to the attackers. Which of the following actions would allow the analyst to achieve the objective?

Options :

A : Upload the binary to an air gapped sandbox for analysis

B : Send the binaries to the antivirus vendor

C : Execute the binaries on an environment with internet connectivity

D : Query the file hashes using VirusTotal

Answer: A

Question 4

Which of the following does "federation" most likely refer to within the context of identity and access management?

Options :

A :

Facilitating groups of users in a similar function or profile to system access that requires elevated or conditional access

B :

An authentication mechanism that allows a user to utilize one set of credentials to access multiple domains

C :

Utilizing a combination of what you know, who you are, and what you have to grant authentication to a user

D : Correlating one-s identity with the attributes and associated applications the user has access to

Answer: B

Question 5

Which of the following stakeholders are most likely to receive a vulnerability scan report? (Select two).

Options :

A : Executive management

B : Law enforcement

C : Marketing

D : Legal

E : Product owner

F : Systems admininstration

Answer: A,F

Free CS0-003 Mock Exam – Practice Online Confidently

Buying Options: