CS0-002 Free Practice Test

- (Exam Topic 3)
A company has alerted planning the implemented a vulnerability management procedure. However, to security maturity level is low, so there are some prerequisites to complete before risk calculation and prioritization. Which of the following should be completed FIRST?

1. A. A business Impact analysis
2. B. A system assessment
3. C. Communication of the risk factors
4. D. A risk identification process

Correct Answer: D

- (Exam Topic 1)
A system administrator is doing network reconnaissance of a company’s external network to determine the vulnerability of various services that are running. Sending some sample traffic to the external host, the administrator obtains the following packet capture:

Based on the output, which of the following services should be further tested for vulnerabilities?

1. A. SSH
2. B. HTTP
3. C. SMB
4. D. HTTPS

Correct Answer: A

- (Exam Topic 3)
Due to a rise m cyberattackers seeking PHI, a healthcare company that collects highly sensitive data from millions of customers is deploying a solution that will ensure the customers' data is protected by the organization internally and externally Which of the following countermeasures can BEST prevent the loss of customers' sensitive data?

1. A. Implement privileged access management
2. B. Implement a risk management process
3. C. Implement multifactor authentication
4. D. Add more security resources to the environment

Correct Answer: C

- (Exam Topic 3)
Which of the following is the software development process by which function, usability, and scenarios are tested against a known set of base requirements?

1. A. Security regression testing
2. B. Code review
3. C. User acceptance testing
4. D. Stress testing

Correct Answer: C
"User acceptance testing (UAT) is the last phase of the software testing process. During UAT, actual software users test the software to make sure it can handle required tasks in real-world scenarios, according to specifications." https://www.plutora.com/blog/uat-user-acceptance-testing

- (Exam Topic 3)
A code review reveals a web application is using lime-based cookies for session management. This is a security concern because lime-based cookies are easy to:

1. A. parameterize.
2. B. decode.
3. C. guess.
4. D. decrypt.

Correct Answer: B