QUESTION: 13

An analyst finds that an IP address outside of the company network that is being used to run network and vulnerability scans across external-facing assets.
Which of the following steps of an attack framework is the analyst witnessing?

Exploitation
Reconnaissance
Command and control
Actions on objectives

Answer(s): B

Reveal Solution Next Question

QUESTION: 14

An incident response analyst notices multiple emails traversing the network that target only the administrators of the company. The email contains a concealed URL that leads to an unknown website in another country.
Which of the following best describes what is happening? (Choose two.)

Beaconing
Domain Name System hijacking
Social engineering attack
On-path attack
Obfuscated links
Address Resolution Protocol poisoning

Answer(s): C,E

Reveal Solution Next Question

QUESTION: 15

During security scanning, a security analyst regularly finds the same vulnerabilities in a critical application.
Which of the following recommendations would best mitigate this problem if applied along the SDLC phase?

Conduct regular red team exercises over the application in production
Ensure that all implemented coding libraries are regularly checked
Use application security scanning as part of the pipeline for the CI/CD flow
Implement proper input validation for any data entry form

Answer(s): C

Reveal Solution Next Question

QUESTION: 16

An analyst is reviewing a vulnerability report and must make recommendations to the executive team. The analyst finds that most systems can be upgraded with a reboot resulting in a single downtime window.
However, two of the critical systems cannot be upgraded due to a vendor appliance that the company does not have access to.
Which of the following inhibitors to remediation do these systems and associated vulnerabilities best represent?

Proprietary systems
Legacy systems
Unsupported operating systems
Lack of maintenance windows

Answer(s): A

Reveal Solution Next Question

Free CompTIA CS0-003 Exam Braindumps (page: 5)

QUESTION: 13

QUESTION: 14

QUESTION: 15

QUESTION: 16

CS0-003 Exam Discussions & Posts