CS0-002 Free Practice Test

- (Exam Topic 2)
A company wants to reduce the cost of deploying servers to support increased network growth. The company is currently unable to keep up with the demand, so it wants to outsource the infrastructure to a cloud-based solution.
Which of the following is the GREATEST threat for the company to consider when outsourcing its infrastructure?

1. A. The cloud service provider is unable to provide sufficient logging and monitoring.
2. B. The cloud service provider is unable to issue sufficient documentation for configurations.
3. C. The cloud service provider conducts a system backup each weekend and once a week during peak business times.
4. D. The cloud service provider has an SLA for system uptime that is lower than 99 9%.

Correct Answer: B

- (Exam Topic 3)
A company frequently expenences issues with credential stuffing attacks Which of the following is the BEST control to help prevent these attacks from being successful?

1. A. SIEM
2. B. IDS
3. C. MFA
4. D. TLS

Correct Answer: C

- (Exam Topic 2)
Malware is suspected on a server in the environment.
The analyst is provided with the output of commands from servers in the environment and needs to review all output files in order to determine which process running on one of the servers may be malware.
INSTRUCTIONS
Servers 1, 2, and 4 are clickable. Select the Server and the process that host the malware.
If at any time you would like to bring back the initial state of the simulation, please click the Reset All button.




Solution:
Server 4 192.168.50.6 Windows, svchost.exe

Does this meet the goal?

1. A. Yes
2. B. No

Correct Answer: A

- (Exam Topic 1)
Which of the following is the BEST way to share incident-related artifacts to provide non-repudiation?

1. A. Secure email
2. B. Encrypted USB drives
3. C. Cloud containers
4. D. Network folders

Correct Answer: B

- (Exam Topic 2)
A malicious artifact was collected during an incident response procedure. A security analyst is unable to run it in a sandbox to understand its features and method of operation. Which of the following procedures is the BEST approach to perform a further analysis of the malware's capabilities?

1. A. Reverse engineering
2. B. Dynamic analysis
3. C. Strings extraction
4. D. Static analysis

Correct Answer: D