CS0-002 Free Practice Test

- (Exam Topic 3)
Which of the following APT adversary archetypes represent non-nation-state threat actors? (Select TWO)

1. A. Kitten
2. B. Panda
3. C. Tiger
4. D. Jackal
5. E. Bear
6. F. Spider

Correct Answer: CD

- (Exam Topic 3)
A security analyst needs to provide the development team with secure connectivity from the corporate network to a three-tier cloud environment. The developers require access to servers in all three tiers in order to perform various configuration tasks. Which of the following technologies should the analyst implement to provide secure transport?

1. A. CASB
2. B. VPC
3. C. Federation
4. D. VPN

Correct Answer: D

- (Exam Topic 1)
An organization has not had an incident for several month. The Chief information Security Officer (CISO) wants to move to proactive stance for security investigations. Which of the following would BEST meet that goal?

1. A. Root-cause analysis
2. B. Active response
3. C. Advanced antivirus
4. D. Information-sharing community
5. E. Threat hunting

Correct Answer: E

- (Exam Topic 2)
A small marketing firm uses many SaaS applications that hold sensitive information The firm has discovered terminated employees are retaining access to systems for many weeks after their end date. Which of the following would BEST resolve the issue of lingering access?

1. A. Configure federated authentication with SSO on cloud provider systems.
2. B. Perform weekly manual reviews on system access to uncover any issues.
3. C. Implement MFA on cloud-based systems.
4. D. Set up a privileged access management tool that can fully manage privileged account access.

Correct Answer: D

- (Exam Topic 3)
Which of the following BEST describes what an organizations incident response plan should cover regarding how the organization handles public or private disclosures of an incident?

1. A. The disclosure section should focus on how to reduce the likelihood customers will leave due to the incident.
2. B. The disclosure section should contain the organization's legal and regulatory requirements regarding disclosures.
3. C. The disclosure section should include the names and contact information of key employees who are needed for incident resolution
4. D. The disclosure section should contain language explaining how the organization will reduce the likelihood of the incident from happening m the future.

Correct Answer: B