Question 1

Which of the following is the best reason to heavily segment business-critical assets from within the network?

Options :

A : Legacy systems

B : Degraded functionality

C : Asset obfuscation

D : Proprietary server

Answer: A

Question 2

A security architect works with a client on security operations center (SOC) capabilities. The security architect wants to ensure the log correlation and investigation activities are accurate across the infrastructure. Which of the following is the best for the client to implement?

Options :

A : Network Time Protocol (NTP)

B : Zero Trust Network Access (ZTNA)

C : Account federation

D : Secure access service edge (SASE)

E : Application programming interfaces (APIs)

Answer: A

Question 3

A cybersecurity analyst is reviewing static application security testing scan results and notices afinding for hard-coded credentials.Which of the following should the analyst recommend to the application team to resolve thisconcern?

Options :

A : Implement a privileged access management solution.

B : Enable single sign-on.

C : Obfuscate application programming interface keys.

D : Integrate secrets management.

Answer: D

Question 4

Which of the following is the most important component to include in the preparation phase of anincident response plan?

Options :

A : Roles and responsibilities

B : After action reports

C : Data integrity validation

D : Chain of custody

Answer: A

Question 5

Which of the following should a cybersecurity analyst utilize when a notification is inaccurate?

Options :

A : Data enrichment

B : Dashboard creation

C : Threat hunting

D : Alert tuning

Answer: D

Free CS0-004 Mock Exam – Practice Online Confidently

Buying Options: