CS0-002試験無料問題集「CompTIA Cybersecurity Analyst (CySA+) Certification 認定」

ページ: 1 / 25
トータル 371 問
完全版を入手する
An organization completed an internal assessment of its policies and procedures. The audit team identified a deficiency in the policies and procedures for PH. Which of the following should be the first step to secure the organization's Pll?

解説: (GoShiken メンバーにのみ表示されます)
Which of the following is MOST important when developing a threat hunting program?

解説: (GoShiken メンバーにのみ表示されます)
A company's Chief Information Security Officer (CISO) published an Internet usage policy that prohibits employees from accessing unauthorized websites. The IT department whitelisted websites used for business needs. The CISO wants the security analyst to recommend a solution that would improve security and support employee morale. Which of the following security recommendations would allow employees to browse non-business-related websites?

解説: (GoShiken メンバーにのみ表示されます)
Legacy medical equipment, which contains sensitive data, cannot be patched. Which of the following is the best solution to improve the equipment's security posture?

解説: (GoShiken メンバーにのみ表示されます)
An email analysis system notifies a security analyst that the following message was quarantined and requires further review.

Which of the following actions should the security analyst take?

解説: (GoShiken メンバーにのみ表示されます)
A company's legal department is concerned that its incident response plan does not cover the countless ways security incidents can occur. The department has asked a security analyst to help tailor the response plan to provide broad coverage for many situations. Which of the following is the best way to achieve this goal?

解説: (GoShiken メンバーにのみ表示されます)
The Chief Information Security Officer (CISO) of a large financial institution is seeking a solution that will block a predetermined set of data points from being transferred or downloaded by employees. The CISO also wants to track the data assets by name, type, content, or data profile.
Which of the following BEST describes what the CIS wants to purchase?

解説: (GoShiken メンバーにのみ表示されます)
An application developer needs help establishing a digital certificate for a new application. Which of the following illustrates a certificate management best practice?

解説: (GoShiken メンバーにのみ表示されます)
A security manager has asked an analyst to provide feedback on the results of a penetration test. After reviewing the results, the manager requests information regarding the possible exploitation of vulnerabilities. Which of the following information data points would be MOST useful for the analyst to provide to the security manager, who would then communicate the risk factors to the senior management team? (Select TWO).

解説: (GoShiken メンバーにのみ表示されます)
A security analyst observes a large amount of scanning activity coming from an IP address outside the organization's environment. Which of the following should the analyst do to block this activity?

解説: (GoShiken メンバーにのみ表示されます)
An organization's Cruel Information Security Officer is concerned the proper control are not in place to identify a malicious insider Which of the following techniques would be BEST to identify employees who attempt to steal data or do harm to the organization?

解説: (GoShiken メンバーにのみ表示されます)
A cybersecunty analyst needs to harden a server that is currently being used as a web server The server needs to be accessible when entenng www company com into the browser Additionally web pages require frequent updates which are performed by a remote contractor Given the following output:

Which of the following should the cybersecunty analyst recommend to harden the server? (Select TWO).

解説: (GoShiken メンバーにのみ表示されます)
A security analyst is reviewing malware files without running them. Which of the following analysis types is the security analyst using?

解説: (GoShiken メンバーにのみ表示されます)
An incident response team detected malicious software that could have gained access to credit card dat a. The incident response team was able to mitigate significant damage and implement corrective actions. By having incident response mechanisms in place. Which of the following should be notified for lessons learned?

解説: (GoShiken メンバーにのみ表示されます)
In response to an audit finding, a company's Chief information Officer (CIO) instructed the security department to Increase the security posture of the vulnerability management program. Currency, the company's vulnerability management program has the following attributes:
Which of the following would BEST Increase the security posture of the vulnerably management program?

解説: (GoShiken メンバーにのみ表示されます)
ページ: 1 / 25
トータル 371 問