Question 1

An analyst is conducting monitoring against an authorized team that win perform adversarial techniques. The analyst interacts with the team twice per day to set the stage for the techniques to be used. Which of the following teams is the analyst a member of?

Options :

A : Orange team

B : Blue team

C : Red team

D : Purple team

Answer: A

Question 2

A security analyst found the following vulnerability on the company’s website:

Which of the following should be implemented to prevent this type of attack in the future?

Options :

A : Input sanitization

B : Output encoding

C : Code obfuscation

D : Prepared statements

Answer: A

Question 3

An analyst wants to ensure that users only leverage web-based software that has been pre-approved by the organization. Which of the following should be deployed?

Options :

A : Blocklisting

B : Allowlisting

C : Graylisting

D : Webhooks

Answer: B

Question 4

The security analyst received the monthly vulnerability report. The following findings were included in the

report

• Five of the systems only required a reboot to finalize the patch application.

• Two of the servers are running outdated operating systems and cannot be patched

The analyst determines that the only way to ensure these servers cannot be compromised is to isolate them.

Which of the following approaches will best minimize the risk of the outdated servers being compromised?

Options :

A : Compensating controls

B : Due diligence

C : Maintenance windows

D : Passive discovery

Answer: A

Question 5

Which of the following is the most important reason for an incident response team to develop a formal

incident declaration?

Options :

A : To require that an incident be reported through the proper channels

B : To identify and document staff who have the authority to declare an incident

C : To allow for public disclosure of a security event impacting the organization

D : To establish the department that is responsible for responding to an incident

Answer: B

Confidently Practice Online with Free CS0-003 Exam Cram

Buying Options: