CS0-002試験無料問題集「CompTIA Cybersecurity Analyst (CySA+) Certification 認定」

An organization wants to consolidate a number of security technologies throughout the organization and standardize a workflow for identifying security issues prioritizing the severity and automating a response Which of the following would best meet the organization's needs'?

解説: (GoShiken メンバーにのみ表示されます)
Which of the following BEST explains the function of trusted firmware updates as they relate to hardware assurance?

解説: (GoShiken メンバーにのみ表示されます)
A systems administrator believes a user's workstation has been compromised. The workstation's performance has been lagging significantly for the past several hours. The administrator runs the task list
/ v command and receives the following output:

Which of the following should a security analyst recognize as an indicator of compromise?

解説: (GoShiken メンバーにのみ表示されます)
An incident response team detected malicious software that could have gained access to credit card dat a. The incident response team was able to mitigate significant damage and implement corrective actions. By having incident response mechanisms in place. Which of the following should be notified for lessons learned?

解説: (GoShiken メンバーにのみ表示されます)
During a review of the vulnerability scan results on a server, an information security analyst notices the following:

The MOST appropriate action for the analyst to recommend to developers is to change the web server so:

解説: (GoShiken メンバーにのみ表示されます)
A security analyst needs to recommend the best approach to test a new application that simulates abnormal user behavior to find software bugs. Which of the following would best accomplish this task?

解説: (GoShiken メンバーにのみ表示されます)
Which of me following are reasons why consumer IoT devices should be avoided in an enterprise environment? (Select TWO)

解説: (GoShiken メンバーにのみ表示されます)
A technician working at company.com received the following email:

After looking at the above communication, which of the following should the technician recommend to the security team to prevent exposure of sensitive information and reduce the risk of corporate data being stored on non-corporate assets?

解説: (GoShiken メンバーにのみ表示されます)
A user reports a malware alert to the help desk. A technician verities the alert, determines the workstation is classified as a low-severity device, and uses network controls to block access. The technician then assigns the ticket to a security analyst who will complete the eradication and recovery processes. Which of the following should the security analyst do next?

解説: (GoShiken メンバーにのみ表示されます)
A security analyst is performing a Diamond Model analysis of an incident the company had last quarter. A potential benefit of this activity is that it can identify:

解説: (GoShiken メンバーにのみ表示されます)
A company wants to ensure confidential data from its storage media files is sanitized so the drives cannot oe reused. Which of the following is the BEST approach?

解説: (GoShiken メンバーにのみ表示されます)
An organization has the following policies:
*Services must run on standard ports.
*Unneeded services must be disabled.
The organization has the following servers:
*192.168.10.1 - web server
*192.168.10.2 - database server
A security analyst runs a scan on the servers and sees the following output:

Which of the following actions should the analyst take?

解説: (GoShiken メンバーにのみ表示されます)
A new prototype for a company's flagship product was leaked on the internet As a result, the management team has locked out all USB drives Optical drive writers are not present on company computers The sales team has been granted an exception to share sales presentation files with third parties Which of the following would allow the IT team to determine which devices are USB enabled?

解説: (GoShiken メンバーにのみ表示されます)
A security analyst is reviewing a new Internet portal that will be used for corporate employees to obtain their pay statements. Corporate policy classifies pay statement information as confidential, and it must be protected by MFA.
Which of the following would best fulfill the MFA requirement while keeping the portal accessible from the internet?

解説: (GoShiken メンバーにのみ表示されます)
During an audit several customer order forms were found to contain inconsistencies between the actual price of an item and the amount charged to the customer Further investigation narrowed the cause of the issue to manipulation of the public-facing web form used by customers to order products Which of the following would be the BEST way to locate this issue?

解説: (GoShiken メンバーにのみ表示されます)