Online Access Free CS0-001 Exam Questions

Following the development of a company's new online application, a security analyst Is brought In to test the site's security before going live. The analyst Is given the following URL and credentials:
htt ps://app.com pany.com/Guest User ID: UserBob Password: S#7h&sh*g
After logging In, the URL changes to the following, and the system displays a screen with graphs of various data points:
https;//opp.company.corn/User/dashboard.php?view=grophs
Which of the following Is the BEST choice for a reasonable test of circumventing the site's security?

• A.Browse explicitly to the URL https://app.company.com/Admln.
• B.Use the browser's 'View Source" feature to see the underlying HTML.
• C.Alter the URL parameters to dashboard.php?view=charts.
• D.Try different combinations of credentials and passwords.

A security analyst has been asked to remediate a server vulnerability. Once the analyst has located a patch for the vulnerability, which of the following should happen NEXT?

• A.Rescan to ensure the vulnerability still exists.
• B.Implement continuous monitoring.
• C.Begin the incident response process.
• D.Start the change control process.

Which of the following is the BEST way to share incident-related artifacts to provide non-repudiation?

• A.Encrypted USB drives
• B.Cloud containers
• C.Secure email
• D.Network folders

The new Chief Technology Officer (CTO) is seeking recommendations for network monitoring services for the local intranet. The CTO would like the capability to monitor all traffic to and from the gateway, as well as the capability to block certain content. Which of the following recommendations would meet the needs of the organization?

• A.Recommend setup of IP filtering on both the internal and external interfaces of the gateway router.
• B.Recommend installation of an IPS on both the internal and external interfaces of the gateway router.
• C.Recommend installation of an IDS on the internal interface and a firewall on the external interface of the gateway router.
• D.Recommend installation of a firewall on the internal interface and a NIDS on the external interface of the gateway router.

A suite of three production servers that were originally configured identically underwent the same vulnerability scans. However, recent results revealed the three servers has different critical vulnerabilities. The servers are not accessible by the Internet, and AV programs have not detected any malware. The servers' syslog files do not show any unusual traffic since they were installed and are physically isolated in an off-site datacenter. Checksum testing of random executables does not reveal tampering. Which of the following scenarios is MOST likely?

• A.Servers have not been scanned with the latest vulnerability signature
• B.Servers have been attacked by outsiders using zero-day vulnerabilities
• C.Servers have received different levels of attention during previous patch management events
• D.Servers were made by different manufacturers