Free CS0-002 Exam Braindumps

- (Exam Topic 3)
A security analyst is investigate an no client related to an alert from the threat detection platform on a host
(10.0 1.25) in a staging environment that could be running a cryptomining tool because it in sending traffic to an IP address that are related to Bitcoin.
The network rules for the instance are the following:

Which of the following is the BEST way to isolate and triage the host?

1. A. Remove rules 1.2. and 3.
2. B. Remove rules 1.2. 4. and 5.
3. C. Remove rules 1.2. 3.4. and 5.
4. D. Remove rules 1.2. and 5.
5. E. Remove rules 1.4. and 5.
6. F. Remove rules 4 and 5

Correct Answer: D

- (Exam Topic 2)
Which of the following sources would a security analyst rely on to provide relevant and timely threat information concerning the financial services industry?

1. A. Information sharing and analysis membership
2. B. Open-source intelligence, such as social media and blogs
3. C. Real-time and automated firewall rules subscriptions
4. D. Common vulnerability and exposure bulletins

Correct Answer: A

- (Exam Topic 2)
A company wants to outsource a key human-resources application service to remote employees as a SaaS-based cloud solution. The company's GREATEST concern should be the SaaS provider's:

1. A. DLP procedures.
2. B. logging and monitoring capabilities.
3. C. data protection capabilities.
4. D. SLA for system uptime.

Correct Answer: C

- (Exam Topic 2)
Which of the following is MOST closely related to the concept of privacy?

1. A. An individual's control over personal information
2. B. A policy implementing strong identity management processes
3. C. A system's ability to protect the confidentiality of sensitive information
4. D. The implementation of confidentiality, integrity, and availability

Correct Answer: A
"Privacy refers to whatever control you have over your personal information and how it is utilized."

- (Exam Topic 1)
A web developer wants to create a new web part within the company website that aggregates sales from individual team sites. A cybersecurity analyst wants to ensure security measurements are implemented during this process. Which of the following remediation actions should the analyst take to implement a vulnerability management process?

1. A. Personnel training
2. B. Vulnerability scan
3. C. Change management
4. D. Sandboxing

Correct Answer: C