Online Access Free CS0-002 Exam Questions

Which of the following is the most important reason to involve the human resources department in incident response?

• A.To prevent Incident responders from Interacting directly with any users
• B.To better Inform recruiters during hiring so they can include incident response Interview questions
• C.To ensure the incident response process captures evidence needed in case of disciplinary actions
• D.To validate that the incident response process meets the organization's best practices

As a proactive threat-hunting technique, hunters must develop situational cases based on likely attack scenarios derived from the available threat intelligence information. After forming the basis of the scenario, which of the following may the threat hunter construct to establish a framework for threat assessment?

• A.Critical asset list
• B.Attack profile
• C.Hypothesis
• D.Threat vector

A security officer needs to find the most cost-effective solution to the current data privacy and protection gap found in the last security assessment. Which of the following is the BEST recommendation?

• A.Add access control requirements.
• B.Implement a data loss prevention solution.
• C.Create a data minimization plan.
• D.Require users to sign NDAs

Which of the following is a reason to use a nsk-based cybersecunty framework?

• A.A risk-based approach always requires quantifying each cyber nsk faced by an organization
• B.A risk-based approach is driven by regulatory compliance and es required for most organizations
• C.A risk-based approach better allocates an organization's resources against cyberthreats and vulnerabilities
• D.A risk-based approach prioritizes vulnerability remediation by threat hunting and other qualitative-based processes

During a routine security review, anomalous traffic from 9.9.9.9 was observed accessing a web server in the corporate perimeter network. The server is mission critical and must remain accessible around the world to serve web content. The Chief Information Security Officer has directed that improper traffic must be restricted. The following output is from the web server:

Which of the following is the best method to accomplish this task?

• A.Adjusting the IDS to block anomalous activity
• B.Adjusting the firewall
• C.Implementing port security
• D.Adding 9.9.9.9 to the blocklist