CompTIA CS0-003 Practice Test - Questions Answers, Page 42

A vulnerability scan shows the following vulnerabilities in the environment:

At the same time, the following security advisory was released:

'A zero-day vulnerability with a CVSS score of 10 may be affecting your web server. The vendor is working on a patch or workaround.'

Which of the following actions should the security analyst take first?

After an incident, a security analyst needs to perform a forensic analysis to report complete information to a company stakeholder. Which of the following is most likely the goal of the forensic analysis in this case?

A corporation wants to implement an agent-based endpoint solution to help:

Flag various threats

Review vulnerability feeds

Aggregate data

Provide real-time metrics by using scripting languages

Which of the following tools should the corporation implement to reach this goal?

An analyst is trying to capture anomalous traffic from a compromised host. Which of the following are the best tools for achieving this objective? (Select two).

A SOC manager reviews metrics from the last four weeks to investigate a recurring availability issue. The manager finds similar events correlating to the times of the reported issues.

Which of the following methods would the manager most likely use to resolve the issue?

A security analyst must assist the IT department with creating a phased plan for vulnerability patching that meets established SLAs.

Which of the following vulnerability management elements will best assist with prioritizing a successful plan?

A Chief Information Security Officer has requested a dashboard to share critical vulnerability management goals with company leadership.

Which of the following would be the best to include in the dashboard?

An incident response team is assessing attack vectors of malware that is encrypting data with ransomware. There are no indications of a network-based intrusion.

Which of the following is the most likely root cause of the incident?

To minimize the impact of a security incident in a heavily regulated company, a cybersecurity analyst has configured audit settings in the organization's cloud services. Which of the following security controls has the analyst configured?