CompTIA CS0-003 Practice Test - Questions Answers, Page 13

A systems administrator notices unfamiliar directory names on a production server. The administrator reviews the directory listings and files, and then concludes the server has been

compromised. Which of the following steps should the administrator take next?

A software developer has been deploying web applications with common security risks to include insufficient logging capabilities. Which of the following actions would be most effective to reduce risks associated with the application development?

A security audit for unsecured network services was conducted, and the following output was generated:

Which of the following services should the security team investigate further? (Select two).

While reviewing web server logs, a security analyst found the following line:

<IMG SRC='vbscript:msgbox('test')'>

Which of the following malicious activities was attempted?

Which of the following is often used to keep the number of alerts to a manageable level when establishing a process to track and analyze violations?

Which of the following is described as a method of enforcing a security policy between cloud customers and cloud services?

After completing a review of network activity. the threat hunting team discovers a device on the network that sends an outbound email via a mail client to a non-company email address daily at 10:00 p.m. Which of the following is potentially occurring?

Approximately 100 employees at your company have received a Phishing email. AS a security analyst. you have been tasked with handling this Situation.

Review the information provided and determine the following:

1- HOW many employees Clicked on the link in the Phishing email?

2- on how many workstations was the malware installed?

3- what is the executable file name of the malware?

You are a cybersecurity analyst tasked with interpreting scan data from Company As servers You must verify the requirements are being met for all of the servers and recommend changes if you find they are not

The company's hardening guidelines indicate the following

* TLS 1 2 is the only version of TLS running.

* Apache 2.4.18 or greater should be used.

* Only default ports should be used.

INSTRUCTIONS

using the supplied data. record the status of compliance With the company's guidelines for each server.

The question contains two parts: make sure you complete Part 1 and Part 2. Make recommendations for Issues based ONLY on the hardening guidelines provided.

Part 1:

AppServ2:

AppServ3:

AppServ4:

Part 2: