Cisco®
Oracle
CompTIA
Checkpoint
ISC
EC-Council
EXIN
Fortinet
ITIL®
Juniper
Microsoft
VMware
Avaya
SAP
Google
Salesforce
Amazon
Palo Alto Networks
ISC2
All Vendors
  2. Home
  3. Exams
  4. CompTIA
  5. CS0-003

Free CompTIA CS0-003 Exam Braindumps (page: 20)

Page 20 of 120
PDF with 473 Questions

An employee accessed a website that caused a device to become infected with invasive malware. The incident response analyst has:
created the initial evidence log.
disabled the wireless adapter on the device.
interviewed the employee, who was unable to identify the website that was accessed. reviewed the web proxy traffic logs.
Which of the following should the analyst do to remediate the infected device?

  1. Update the system firmware and reimage the hardware.
  2. Install an additional malware scanner that will send email alerts to the analyst.
  3. Configure the system to use a proxy server for Internet access.
  4. Delete the user profile and restore data from backup.

Answer(s): A



A cloud team received an alert that unauthorized resources were being auto-provisioned. After investigating, the team suspects that cryptomining is occurring.
Which of the following indicators would most likely lead the team to this conclusion?

  1. High GPU utilization
  2. Bandwidth consumption
  3. Unauthorized changes
  4. Unusual traffic spikes

Answer(s): A



A company’s security team is updating a section of the reporting policy that pertains to inappropriate use of resources (e.g., an employee who installs cryptominers on workstations in the office). Besides the security team, which of the following groups should the issue be escalated to first in order to comply with industry best practices?

  1. Help desk
  2. Law enforcement
  3. Legal department
  4. Board member

Answer(s): C



Given the following CVSS string:
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Which of the following attributes correctly describes this vulnerability?

  1. A user is required to exploit this vulnerability.
  2. The vulnerability is network based.
  3. The vulnerability does not affect confidentiality.
  4. The complexity to exploit the vulnerability is high.

Answer(s): B






Post your Comments and Discuss CompTIA CS0-003 exam prep with other Community members:

CS0-003 Exam Discussions & Posts