Cisco®
CompTIA
Checkpoint
ISC
EC-Council
EXIN
Fortinet
ITIL®
Juniper
Microsoft
VMware
Avaya
Google
Salesforce
Amazon
Palo Alto Networks
ISC2
Splunk®
MuleSoft
All Vendors
  2. Home
  3. Exams
  4. CompTIA
  5. CS0-003

Free CompTIA CS0-003 Exam Braindumps (page: 3)

93.3% Passing Rate DOWNLOAD PDF EXAM
473 Questions & Answers
Page 3 of 120

The Chief Executive Officer of an organization recently heard that exploitation of new attacks in the industry was happening approximately 45 days after a patch was released.
Which of the following would best protect this organization?

  1. A mean time to remediate of 30 days
  2. A mean time to detect of 45 days
  3. A mean time to respond of 15 days
  4. Third-party application testing

Answer(s): A



A security analyst recently joined the team and is trying to determine which scripting language is being used in a production script to determine if it is malicious. Given the following script:


Which of the following scripting languages was used in the script?

  1. PowerShell
  2. Ruby
  3. Python
  4. Shell script

Answer(s): A



A company's user accounts have been compromised. Users are also reporting that the company's internal portal is sometimes only accessible through HTTP, other times; it is accessible through HTTPS.
Which of the following most likely describes the observed activity?

  1. There is an issue with the SSL certificate causing port 443 to become unavailable for HTTPS access
  2. An on-path attack is being performed by someone with internal access that forces users into port 80
  3. The web server cannot handle an increasing amount of HTTPS requests so it forwards users to port 80
  4. An error was caused by BGP due to new rules applied over the company's internal routers

Answer(s): B



A security analyst is tasked with prioritizing vulnerabilities for remediation. The relevant company security policies are shown below:
Security Policy 1006: Vulnerability Management
1. The Company shall use the CVSSv3.1 Base Score Metrics (Exploitability and Impact) to prioritize the remediation of security vulnerabilities.
2. In situations where a choice must be made between confidentiality and availability, the Company shall prioritize confidentiality of data over availability of systems and data.
3. The Company shall prioritize patching of publicly available systems and services over patching of internally available system.
According to the security policy, which of the following vulnerabilities should be the highest priority to patch?

  1. Name: THOR.HAMMER -
    CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
    Internal System
  2. Name: CAP.SHIELD -
    CVSS 3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
    External System Most Voted
  3. Name: LOKI.DAGGER -
    CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
    External System
  4. Name: THANOS.GAUNTLET -
    CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
    Internal System

Answer(s): B






Post your Comments and Discuss CompTIA CS0-003 exam prep with other Community members:

CS0-003 Exam Discussions & Posts