CS0-001試験無料問題集（458題）「CompTIA Cybersecurity Analyst (CySA+) Certification 認定」

出題：1

An organization has two environments: development and production. Development is where applications are developed with unit testing. The development environment has many configuration differences from the production environment. All applications are hosted on virtual machines. Vulnerability scans are performed against all systems before and after any application or configuration changes to any environment. Lately, vulnerability remediation activity has caused production applications to crash and behave unpredictably. Which of the following changes should be made to the current vulnerability management process?

A. Refine testing in the development environment to include fuzzing and user acceptance testing so applications are more stable before they migrate to production

B. Create a second production environment by cloning the virtual machines, and if any stability problems occur, migrate users to the alternate production environment

C. Refine testing in the production environment to include more exhaustive application stability testing while continuing to maintain the robust vulnerability remediation activities

D. Create a third environment between development and production that mirrors production and tests all changes before deployment to the users

正解：D 解答を投票する

出題：2

As part of an internal banking project, a developer configured a new SSO solution between the company's native application, API gateway, and identity provider. All the traffic has been configured to be encrypted at rest and in transit. During a security review of the solution the developer highlights the requirements around long-lived sessions to support the digital experience. A security analyst is reviewing the solution. Which of the following controls should the analyst recommend to the developer ? (Select TWO.)

A. Ensure there is context-based authentication utilizing multifactor authentication.

B. Ensure secure storage of the session cookies

C. Ensure refresh lokens are configured to never time out

D. Ensure customers are able to self-service password resets.

E. Ensure short-lived timeouts an configured on lire access lokens.

正解：A,B 解答を投票する

出題：3

A security analyst's company uses RADIUS to support a remote sales staff of more than 700 people. The Chief Information Security Officer (CISO) asked to have IPSec using ESP and 3DES enabled to ensure the confidentiality of the communication as per RFC 3162. After the implementation was complete, many sales users reported latency issues and other performance issues when attempting to connect remotely. Which of the following is occurring?

A. The device running RADIUS lacks sufficient RAM and processing power to handle ESP implementation.

B. The IPSec implementation has significantly increased the amount of bandwidth needed.

C. The implementation should have used AES instead of 3DES.

D. RFC 3162 is known to cause significant performance problems.

正解：A 解答を投票する

出題：4

A Chief Information Security Officer (CISO) wants to standardize the company's security program so it can be objectively assessed as part of an upcoming audit requested by management.
Which of the following would holistically assist in this effort?

A. Nessus

B. NIST

C. Scrum

D. AUP

E. ITIL

正解：B 解答を投票する

出題：5

Which of the following stakeholders would need to be aware of an e-discovery notice received by the security office about an ongoing case within the manufacturing department?

A. Legal

B. Marketing

C. Board of trustees

D. Human resources

正解：A 解答を投票する

出題：6

A security analyst is adding input to the incident response communication plan. A company officer has suggested that if a data breach occurs, only affected parties should be notified to keep an incident from becoming a media headline. Which of the following should the analyst recommend to the company officer?

A. Guidance from laws and regulations should be considered when deciding who must be notified in order to avoid fines and judgements from non-compliance.

B. The HR department should have information security personnel who are involved in the investigation of the incident sign non-disclosure agreements so the company cannot be held liable for customer data that might be viewed during an investigation.

C. An externally hosted website should be prepared in advance to ensure that when an incident occurs victims have timely access to notifications from a non-compromised recourse.

D. The first responder should contact law enforcement upon confirmation of a security incident in order for a forensics team to preserve chain of custody.

正解：D 解答を投票する

出題：7

A security analyst, who is working for a company that utilizes Linux servers, receives the following results from a vulnerability scan:

Which of the following is MOST likely a false positive?

A. Unsupported web server detection

B. Windows SMB service enumeration via \srvsvc

C. Anonymous FTP enabled

D. ICMP timestamp request remote date disclosure

正解：B 解答を投票する

出題：8

While conducting research on malicious domains, a threat intelligence analyst received a blue screen of death. The analyst rebooted and received a message stating that the computer had been locked and could only be opened by following the instructions on the screen. Which of the following combinations describes the MOST likely threat and the PRIMARY mitigation for the threat?

A. Ransomware and data backups

B. Ransomware and update antivirus

C. Ransomware and full disk encryption

D. Account takeover and data backups

正解：A 解答を投票する

出題：9

An organization is experiencing degradation of critical services and availability of critical external resources. Which of the following can be used to investigate the issue?

A. Risk analysis

B. Behavioral analysis

C. Netflow analysis

D. Vulnerability analysis

正解：C 解答を投票する

CS0-001試験無料問題集「CompTIA Cybersecurity Analyst (CySA+) Certification 認定」