2023 Realistic CS0-003 Dumps Latest CompTIA Practice Tests Dumps [Q37-Q54]

QUESTION 37
Which of the following concepts is using an API to insert bulk access requests from a file into an identity management system an example of?

QUESTION 38
Which of the following would help to minimize human engagement and aid in process improvement in security operations?

QUESTION 39
Which of the following ICS network protocols has no inherent security functions on TCP port 502?

QUESTION 40
An analyst notices there is an internal device sending HTTPS traffic with additional characters in the header to a known-malicious IP in another country. Which of the following describes what the analyst has noticed?

QUESTION 41
A security analyst is trying to identify anomalies on the network routing. Which of the following functions can the analyst use on a shell script to achieve the objective most accurately?

QUESTION 42
A cybersecurity team lead is developing metrics to present in the weekly executive briefs. Executives are interested in knowing how long it takes to stop the spread of malware that enters the network.
Which of the following metrics should the team lead include in the briefs?

QUESTION 43
A security analyst is logged on to a jump server to audit the system configuration and status. The organization’s policies for access to and configuration of the jump server include the following:
* No network access is allowed to the internet.
* SSH is only for management of the server.
* Users must utilize their own accounts, with no direct login as an administrator.
* Unnecessary services must be disabled.
The analyst runs netstar with elevated permissions and receives the following output:

Which of the following policies does the server violate?

QUESTION 44
A security engineer is reviewing security products that identify malicious actions by users as part of a company’s insider threat program. Which of the following is the most appropriate product category for this purpose?

QUESTION 45
Which of the following is the best metric for an organization to focus on given recent investments in SIEM, SOAR, and a ticketing system?

QUESTION 46
Which of the following is the best way to begin preparation for a report titled “What We Learned” regarding a recent incident involving a cybersecurity breach?

QUESTION 47
A security analyst discovers an LFI vulnerability that can be exploited to extract credentials from the underlying host. Which of the following patterns can the security analyst use to search the web server logs for evidence of exploitation of that particular vulnerability?

QUESTION 48
A SOC manager receives a phone call from an upset customer. The customer received a vulnerability report two hours ago: but the report did not have a follow-up remediation response from an analyst. Which of the following documents should the SOC manager review to ensure the team is meeting the appropriate contractual obligations for the customer?

QUESTION 49
A cybersecurity analyst is concerned about attacks that use advanced evasion techniques. Which of the following would best mitigate such attacks?

QUESTION 50
A company’s user accounts have been compromised. Users are also reporting that the company’s internal portal is sometimes only accessible through HTTP, other times; it is accessible through HTTPS. Which of the following most likely describes the observed activity?

QUESTION 51
The management team has asked a senior security engineer to explore DLP security solutions for the company’s growing use of cloud-based storage. Which of the following is an appropriate solution to control the sensitive data that is being stored in the cloud?

QUESTION 52
Which of the following best describes the goal of a tabletop exercise?

QUESTION 53
Which of the following items should be included in a vulnerability scan report? (Choose two.)

QUESTION 54
A security analyst recently joined the team and is trying to determine which scripting language is being used in a production script to determine if it is malicious. Given the following script:

Which of the following scripting languages was used in the script?