CS0-002 Free Practice Test

- (Exam Topic 1)
A company just chose a global software company based in Europe to implement a new supply chain management solution. Which of the following would be the MAIN concern of the company?

1. A. Violating national security policy
2. B. Packet injection
3. C. Loss of intellectual property
4. D. International labor laws

Correct Answer: A

- (Exam Topic 2)
A company's security officer needs to implement geographical IP blocks for nation-state actors from a foreign country On which of the following should the blocks be implemented'?

1. A. Web content filter
2. B. Access control list
3. C. Network access control
4. D. Data loss prevention

Correct Answer: B

- (Exam Topic 3)
An organization is adopting loT devices at an increasing rate and will need to account for firmware updates in its vulnerability management programs. Despite the number of devices being deployed, the organization has only focused on software patches so far. leaving hardware-related weaknesses open to compromise. Which of the following best practices will help the organization to track and deploy trusted firmware updates as part of its vulnerability management programs?

1. A. Utilize threat intelligence to guide risk evaluation activities and implement critical updates after proper testing.
2. B. Apply all firmware updates as soon as they are released to mitigate the risk of compromise.
3. C. Determine an annual patch cadence to ensure all patching occurs at the same time.
4. D. Implement an automated solution that detects when vendors release firmware updates and immediately deploy updates to production.

Correct Answer: D

- (Exam Topic 1)
An analyst is investigating an anomalous event reported by the SOC. After reviewing the system logs the analyst identifies an unexpected addition of a user with root-level privileges on the endpoint. Which of the following data sources will BEST help the analyst to determine whether this event constitutes an incident?

1. A. Patching logs
2. B. Threat feed
3. C. Backup logs
4. D. Change requests
5. E. Data classification matrix

Correct Answer: D

- (Exam Topic 2)
The Chief Information Officer (CIO) of a large healthcare institution is concerned about all machines having direct access to sensitive patient information. Which of the following should the security analyst implement to BEST mitigate the risk of sensitive data exposure?

1. A. A cloud access service broker system
2. B. NAC to ensure minimum standards are met
3. C. MFA on all workstations
4. D. Network segmentation

Correct Answer: D