CS0-002 Free Practice Test

- (Exam Topic 1)
You are a cybersecurity analyst tasked with interpreting scan data from Company A's servers. You must verify the requirements are being met for all of the servers and recommend changes if you find they are not.
The company's hardening guidelines indicate the following:
• TLS 1.2 is the only version of TLS running.
• Apache 2.4.18 or greater should be used.
• Only default ports should be used. INSTRUCTIONS
Using the supplied data, record the status of compliance with the company's guidelines for each server.
The question contains two parts: make sure you complete Part 1 and Part 2. Make recommendations for issues based ONLY on the hardening guidelines provided.





Solution:
Part 1 Answer
Check on the following:
AppServ1 is only using TLS.1.2
AppServ4 is only using TLS.1.2
AppServ1 is using Apache 2.4.18 or greater
AppServ3 is using Apache 2.4.18 or greater
AppServ4 is using Apache 2.4.18 or greater
Part 2 Answer
Recommendation:
Recommendation is to disable TLS v1.1 on AppServ2 and AppServ3. Also upgrade AppServ2 Apache to version 2.4.48 from its current version of 2.3.48


Does this meet the goal?

1. A. Yes
2. B. No

Correct Answer: A

- (Exam Topic 1)
An analyst performs a routine scan of a host using Nmap and receives the following output:

Which of the following should the analyst investigate FIRST?

1. A. Port 21
2. B. Port 22
3. C. Port 23
4. D. Port 80

Correct Answer: A

- (Exam Topic 3)
A security team has begun updating the risk management plan incident response plan and system security plan to ensure compliance with secunty review guidelines Which of the (olowing can be executed by internal managers to simulate and validate the proposed changes'?

1. A. Internal management review
2. B. Control assessment
3. C. Tabletop exercise
4. D. Peer review

Correct Answer: B

- (Exam Topic 3)
The security team decides to meet informally to discuss and test the response plan for potential security breaches and emergency situations. Which of the following types of training will the security team perform?

1. A. Tabletop exercise
2. B. Red-team attack
3. C. System assessment implementation
4. D. Blue-team training
5. E. White-team engagement

Correct Answer: D

- (Exam Topic 1)
Which of the following would a security engineer recommend to BEST protect sensitive system data from being accessed on mobile devices?

1. A. Use a UEFl boot password.
2. B. Implement a self-encrypted disk.
3. C. Configure filesystem encryption
4. D. Enable Secure Boot using TPM

Correct Answer: C