Question 1

A Chief Information Security Officer has outlined several requirements for a new vulnerability scanning project: . Must use minimal network bandwidth . Must use minimal host resources . Must provide accurate, near real-time updates . Must not have any stored credentials in configuration on the scanner Which of the following vulnerability scanning methods should be used to best meet these requirements?

Options :

A : Internal

B : Agent

C : Active

D : Uncredentialed

Answer: B

Question 2

A vulnerability analyst received a list of system vulnerabilities and needs to evaluate the relevant impact of the exploits on the business. Given the constraints of the current sprint, only three can be remediated. Which of the following represents the least impactful risk, given the CVSS3.1 base scores?

Options :

A : AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:L - Base Score 6.0

B : AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:L/A:L - Base Score 7.2

C : AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H - Base Score 6.4

D : AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:L - Base Score 6.5

Answer: A

Question 3

Which of the following best describes the key elements of a successful information security program?

Options :

A : Business impact analysis, asset and change management, and security communication plan

B :

Security policy implementation, assignment of roles and responsibilities, and information asset classification

C :

Disaster recovery and business continuity planning, and the definition of access control requirements and human resource policies

D :

Senior management organizational structure, message distribution standards, and procedures for the operation of security management systems

Answer: B

Question 4

While configuring a SIEM for an organization, a security analyst is having difficulty correlating incidents across different systems. Which of the following should be checked first?

Options :

A : If appropriate logging levels are set

B : NTP configuration on each system

C : Behavioral correlation settings

D : Data normalization rules

Answer: B

Question 5

The security team at a company, which was a recent target of ransomware, compiled a list of hosts that were

identified as impacted and in scope for this incident. Based on the following host list:

Which of the following systems was most pivotal to the threat actor in its distribution of the encryption binary via Group Policy?

Options :

A : SQL01

B : WK10-Sales07

C : WK7-Plant01

D : DCEast01

E : HQAdmin9

Answer: D

Confidently Practice Online with Free CS0-003 Exam Cram

Buying Options: