Online Access Free CS0-001 Exam Questions

A staff member reported that a laptop has degraded performance. The security analyst has investigated the issue and discovered that CPU utilization, memory utilization, and outbound network traffic are consuming the laptop resources. Which of the following is the BEST course of actions to resolve the problem?

• A.Disable scheduled tasks.
• B.Suspend virus scan.
• C.Increase laptop memory.
• D.Ensure the laptop OS is properly patched.
• E.Identify and remove malicious processes.

After reviewing the following packet, a cybersecurity analyst has discovered an unauthorized service is running on a company's computer.

Which of the following ACLs, if implemented, will prevent further access ONLY to the unauthorized service and will not impact other services?

• A.DENY TCP ANY HOST 192.168.1.10 EQ 25
• B.DENY IP HOST192.168.1.10 HOST 10.38.219.20 EQ 3389
• C.DENY IP HOST 10.38.219.20 ANY EQ 25
• D.DENY TCP ANY HOST 10.38.219.20 EQ 3389

Various devices are connecting and authenticating to a single evil twin within the network. Which of the following are MOST likely being targeted?

• A.Wired SCADA devices
• B.All endpoints
• C.Mobile devices
• D.Network infrastructure
• E.VPNs

An alert is issued from the SIEM that indicates a large number of failed logins for the same account name on one of the application servers starting at 10:20 a.m. No other significant failed login activity is detected. Using Splunk to search for activity pertaining to that account name, a security analyst finds the account has been authenticating successfully for some time and started to fail this morning. The account is attempting to authenticate from an internal server that is running a database to an application server. No other security activity is detected on the network. The analyst discovers the account owner is a developer who no longer works for the company. Which of the following is the MOST likely reason for the failed login attempts for that account?

• A.The host-based firewall is blocking port 389 LDAP communication, preventing the login credentials from being received by the application server
• B.The license for the application has expired, and the failed logins will continue to occur until a new license key is installed on the application
• C.The account that is failing to authenticate has not been maintained, and the company password change policy time frame has been reached for that account
• D.A successful malware attack has provided someone access to the network, and failed login attempts are an indication of an attempt to privilege access to the application

A software assurance lab is performing a dynamic assessment on an application by automatically generating and inputting different, random data sets to attempt to cause an error/failure condition. Which of the following software assessment capabilities is the lab performing AND during which phase of the SDLC should this occur? (Select two.)

• A.Prototyping phase
• B.Static code analysis
• C.Planning phase
• D.Fuzzing
• E.Requirements phase
• F.Behavior modeling