Practice CS0-002 Exam Online

Question 1

Which of the following sets of attributes BEST illustrates the characteristics of an insider threat from a security perspective?

A : Unauthorized, unintentional, benign

B : Unauthorized, intentional, malicious

C : Authorized, intentional, malicious

D : Authorized, unintentional, benign

Answer: C

Question 2

An email analysis system notifies a security analyst that the following message was quarantined and requires further review.

Other-Image-2c25d0abd-9346-4ce2-97cf-b6effd98dd2e

Which of the following actions should the security analyst take?

A : Release the email for delivery due to its importance.

B : Immediately contact a purchasing agent to expedite.

C : Delete the email and block the sender.

D : Purchase the gift cards and submit an expense report.

Answer: C

Question 3

A security analyst is reviewing the network security monitoring logs listed below:

Which of the following is the analyst MOST likely observing? (Select TWO).

A : 10.1.1.128 sent malicious requests, and the alert is a false positive.

B : 10.1.1.129 sent potential malicious requests to the web server.

C : 10.1.1.129 sent non-malicious requests, and the alert is a false positive.

D : 10.1.1.128 sent potential malicious traffic to the web server.

E : 10.1.1 .129 successfully exploited a vulnerability on the web server.

Answer: A,D

Question 4

A consultant evaluating multiple threat intelligence leads to assess potential risks for a client. Which of the following is the BEST approach for the consultant to consider when modeling the client's attack surface?

A : Ask for external scans from industry peers, look at the open ports, and compare Information with the client.

B : Discuss potential tools the client can purchase lo reduce the livelihood of an attack.

C : Look at attacks against similar industry peers and assess the probability of the same attacks happening.

D : Meet with the senior management team to determine if funding is available for recommended solutions.

Answer: C

Question 5

A company's data is still being exfiltered to business competitors after the implementation of a DLP solution. Which of the following is the most likely reason why the data is still being compromised?

A : Printed reports from the database contain sensitive information

B : DRM must be implemented with the DLP solution

C : Users are not labeling the appropriate data sets

D : DLP solutions are only effective when they are implemented with disk encryption

Answer: B

Name:	CompTIA Cybersecurity Analyst (CySA+)
Exam Code:	CS0-002
Certification:	CompTIA Cybersecurity Analyst
Vendor:	CompTIA
Total Questions:	578
Last Updated:	Apr 23, 2024

CompTIA CS0-002