CompTIA CS0-002 問題集

質問 1：
A security team has begun updating the risk management plan, incident response plan, and system security plan to ensure compliance with security review guidelines. Which of the following can be executed by internal managers to simulate and validate the proposed changes?
A. Peer review
B. Internal management review
C. Control assessment
D. Tabletop exercise
正解：D
解説: (Topexam メンバーにのみ表示されます)

質問 2：
Forming a hypothesis, looking for indicators of compromise, and using the findings to proactively improve detection capabilities are examples of the value of:
A. red learning.
B. penetration testing.
C. threat hunting.
D. vulnerability scanning.
正解：C
解説: (Topexam メンバーにのみ表示されます)

質問 3：
An organization completed an internal assessment of its policies and procedures. The audit team identified a deficiency in the policies and procedures for PH. Which of the following should be the first step to secure the organization's Pll?
A. Complete Pll training within the organization.
B. Formalize current Pll documentation.
C. Contact all Pll data owners within the organization.
D. Identify what type of Pll is on the network.
正解：D
解説: (Topexam メンバーにのみ表示されます)

質問 4：
A company wants to ensure confidential data from its storage media files is sanitized so the drives cannot oe reused. Which of the following is the BEST approach?
A. Shredding
B. Formatting
C. Degaussing
D. Encrypting
正解：A
解説: (Topexam メンバーにのみ表示されます)

質問 5：
An application has been updated to fix a vulnerability. Which of the following would ensure that previously patched vulnerabilities have not been reintroduced?
A. Code review
B. Stress testing
C. Peer review
D. Regression testing
正解：D
解説: (Topexam メンバーにのみ表示されます)

質問 6：
A security operations manager wants some recommendations for improving security monitoring. The security team currently uses past events to create an IOC list for monitoring.
Which of the following is the best suggestion for improving monitoring capabilities?
A. Update the IPS and IDS with the latest rule sets from the provider.
B. Implement an automated malware solution on the IPS.
C. Create an automated script to update the IPS and IDS rule sets.
D. Use an automated subscription to select threat feeds for IDS.
正解：D
解説: (Topexam メンバーにのみ表示されます)

質問 7：
The majority of a company's employees have stated they are unable to perform their job duties due to outdated workstations, so the company has decided to institute BYOD. Which of the following would a security analyst MOST likely recommend for securing the proposed solution?
A. A firewalled environment for client devices and a secure VDl for BYOO users
B. 802.1X lo enforce company policy on BYOD user hardware
C. A standardized anti-malware platform and a unified operating system vendor
D. A Linux-based system and mandatory training on Linux for all BYOD users
正解：A
解説: (Topexam メンバーにのみ表示されます)

質問 8：
A security analyst identified one server that was compromised and used as a data making machine, and a few of the hard drive that was created. Which of the following will MOST likely provide information about when and how the machine was compromised and where the malware is located?
A. System registry extraction
B. Data carving
C. System timeline reconstruction
D. Volatile memory analysts
正解：C
解説: (Topexam メンバーにのみ表示されます)

質問 9：
To validate local system-hardening requirements, which of the following types of vulnerability scans would work BEST to verify the scanned device meets security policies?
A. DACS
B. DAST
C. SAST
D. SCAP
正解：D
解説: (Topexam メンバーにのみ表示されます)