Online Access Free CS0-003 Exam Questions

A report contains IoC and TTP information for a zero-day exploit that leverages vulnerabilities in a specific version of a web application. Which of the following actions should a SOC analyst take first after receiving the report?

• A.Verify whether the information is relevant to the organization.
• B.Block the IP addresses and domains from the report in the web proxy and firewalls.
• C.Implement a vulnerability scan to determine whether the environment is at risk.
• D.Analyze the web application logs to identify any suspicious or malicious activity.

While reviewing the web server logs, a security analyst notices the following snippet:
.. \ .. / .. \ .. /boot.ini
Which of the following Is belng attempted?

• A.Cross-site scripting
• B.Remote file inclusion
• C.Directory traversal
• D.Enumeration of /etc/passwd
• E.Remote code execution

A security analyst scans a host and generates the following output:

Which of the following best describes the output?

• A.The host is vulnerable to web-based exploits.
• B.The host Is allowlng unsecured FTP connectlons.
• C.The host is unresponsive to the ICMP request.
• D.The host Is running a vulnerable mall server.

A company ' s security team is updating a section of the reporting policy that pertains to inappropriate use of resources (e.g., an employee who installs cryptominers on workstations in the office). Besides the security team, which of the following groups should the issue be escalated to first in order to comply with industry best practices?

• A.Legal department
• B.Help desk
• C.Law enforcement
• D.Board member

A security analyst is trying to identify possible network addresses from different source networks belonging to the same company and region. Which of the following shell script functions could help achieve the goal?

• A.C. function y() { dig $(dig -x $1 | grep PTR | tail -n 1 | awk -F ".in-addr" '{print $1}').origin.asn.cymru.
  com TXT +short }
• B.B. function x() { b=traceroute -m 40 $1 | awk 'END{print $1}') & & echo "$1 | $b" }
• C.function w() { a=$(ping -c 1 $1 | awk-F "/" 'END{print $1}') & & echo "$1 | $a" }
• D.function z() { c=$(geoiplookup$1) & & echo "$1 | $c" }