CompTIA
Checkpoint
ISC
HP
Dell
EC-Council
EXIN
Fortinet
ITIL®
Juniper
PMI
Microsoft
VMware
Avaya
Google
Salesforce
Amazon
Palo Alto Networks
Certiport
ISC2
All Vendors
  2. Home
  3. Exams
  4. CompTIA
  5. CS0-003

Free CS0-003 Exam Braindumps (page: 2)

Page 2 of 106
PDF with 451 Questions

A recent zero-day vulnerability is being actively exploited, requires no user interaction or privilege escalation, and has a significant impact to confidentiality and integrity but not to availability. Which of the following CVE metrics would be most accurate for this zero-day threat?

  1. CVSS:31/AV:C:L/PR:N/UI:N/S:U/C:H/I:K/A:L
  2. CVSS:31/AV:K/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:L
  3. CVSS:31/AV:C:L/PR:N/UI:H/S:U/C:L/I::H
  4. CVSS:31/AV:L/AC:L/PR:R/UI:R/S:U/C:H/I:L/A:H

Answer(s): A



Which of the following tools would work best to prevent the exposure of PII outside of an organization?

  1. PAM
  2. IDS
  3. PKI
  4. DLP

Answer(s): D



An organization conducted a web application vulnerability assessment against the corporate website, and the following output was observed:
Which of the following tuning recommendations should the security analyst share?

  1. Set an HttpOnly flag to force communication by HTTPS
  2. Block requests without an X-Frame-Options header
  3. Configure an Access-Control-Allow-Origin header to authorized domains
  4. Disable the cross-origin resource sharing header

Answer(s): C



Which of the following items should be included in a vulnerability scan report? (Choose two.)

  1. Lessons learned
  2. Service-level agreement
  3. Playbook
  4. Affected hosts
  5. Risk score
  6. Education plan

Answer(s): D,E






Post your Comments and Discuss CompTIA CS0-003 exam with other Community members:

CS0-003 Exam Discussions & Posts