CompTIA CS0-003 問題集

質問 1：
The SOC received a threat intelligence notification indicating that an employee's credentials were found on the dark web. The user's web and log-in activities were reviewed for malicious or anomalous connections, data uploads/downloads, and exploits. A review of the controls confirmed multifactor authentication was enabled. Which of the following should be done first to mitigate impact to the business networks and assets?
A. Review and ensure privileges assigned to the user's account reflect least privilege.
B. Perform a forced password reset.
C. Perform an ad hoc AV scan on the user's laptop.
D. Lower the thresholds for SOC alerting of suspected malicious activity.
E. Communicate the compromised credentials to the user.
正解：B
解説: (Topexam メンバーにのみ表示されます)

質問 2：
Which of the following describes the best reason for conducting a root cause analysis?
A. The root cause analysis allows the incident to be properly documented for reporting.
B. The root cause analysis develops recommendations to improve the process.
C. The root cause analysis ensures that proper timelines were documented.
D. The root cause analysis identifies the contributing items that facilitated the event
正解：D
解説: (Topexam メンバーにのみ表示されます)

質問 3：
The vulnerability analyst reviews threat intelligence regarding emerging vulnerabilities affecting workstations that are used within the company:

Which of the following vulnerabilities should the analyst be most concerned about, knowing that end users frequently click on malicious links sent via email?
A. Vulnerability A
B. Vulnerability C
C. Vulnerability B
D. Vulnerability D
正解：C
解説: (Topexam メンバーにのみ表示されます)

質問 4：
A security program was able to achieve a 30% improvement in MTTR by integrating security controls into a SIEM. The analyst no longer had to jump between tools. Which of the following best describes what the security program did?
A. Data enrichment
B. Threat feed combination
C. Security control plane
D. Single pane of glass
正解：D
解説: (Topexam メンバーにのみ表示されます)

質問 5：
Which of the following threat-modeling procedures is in the OWASP Web Security Testing Guide?
A. Review Of security requirements
B. Security by design
C. Decomposing the application
D. Compliance checks
正解：C
解説: (Topexam メンバーにのみ表示されます)

質問 6：
A security analyst needs to ensure that systems across the organization are protected based on the sensitivity of the content each system hosts. The analyst is working with the respective system owners to help determine the best methodology that seeks to promote confidentiality, availability, and integrity of the data being hosted. Which of the following should the security analyst perform first to categorize and prioritize the respective systems?
A. Determine the asset value of each system.
B. Scan the systems to see which vulnerabilities currently exist.
C. Configure alerts for vendor-specific zero-day exploits.
D. Interview the users who access these systems,
正解：A
解説: (Topexam メンバーにのみ表示されます)