Cisco®
Oracle
CompTIA
Checkpoint
ISC
EC-Council
EXIN
Fortinet
ITIL®
Juniper
Microsoft
VMware
Avaya
SAP
Google
Salesforce
Amazon
Palo Alto Networks
ISC2
All Vendors
  2. Home
  3. Exams
  4. CompTIA
  5. CS0-003

Free CompTIA CS0-003 Exam Braindumps (page: 22)

Page 22 of 120
PDF with 473 Questions

A virtual web server in a server pool was infected with malware after an analyst used the internet to research a system issue. After the server was rebuilt and added back into the server pool, users reported issues with the website, indicating the site could not be trusted.
Which of the following is the most likely cause of the server issue?

  1. The server was configured to use SSL to securely transmit data.
  2. The server was supporting weak TLS protocols for client connections.
  3. The malware infected all the web servers in the pool.
  4. The digital certificate on the web server was self-signed.

Answer(s): D



A zero-day command injection vulnerability was published. A security administrator is analyzing the following logs for evidence of adversaries attempting to exploit the vulnerability:


Which of the following log entries provides evidence of the attempted exploit?

  1. Log entry 1
  2. Log entry 2
  3. Log entry 3
  4. Log entry 4

Answer(s): A



A security analyst needs to ensure that systems across the organization are protected based on the sensitivity of the content each system hosts. The analyst is working with the respective system owners to help determine the best methodology that seeks to promote confidentiality, availability, and integrity of the data being hosted.
Which of the following should the security analyst perform first to categorize and prioritize the respective systems?

  1. Interview the users who access these systems.
  2. Scan the systems to see which vulnerabilities currently exist.
  3. Configure alerts for vendor-specific zero-day exploits.
  4. Determine the asset value of each system.

Answer(s): D



A security analyst is reviewing the following alert that was triggered by FIM on a critical system:


Which of the following best describes the suspicious activity that is occurring?

  1. A fake antivirus program was installed by the user.
  2. A network drive was added to allow exfiltration of data.
  3. A new program has been set to execute on system start.
  4. The host firewall on 192.168.1.10 was disabled.

Answer(s): C






Post your Comments and Discuss CompTIA CS0-003 exam prep with other Community members:

CS0-003 Exam Discussions & Posts