Free CompTIA CS0-001 Exam Dumps Questions & Answers

An employee at an insurance company is processing claims that include patient addresses, clinic visits, diagnosis information, and prescription. While forwarding documentation to the supervisor, the employee accidentally sends the data to a personal email address outside of the company due to a typo. Which of the following types of data has been compromised?

• A.Intellectual property
• B.PCI
• C.PHI
• D.Proprietary information

Which of the following policies BEST explains the purpose of a data ownership policy?

• A.The policy should outline the organization's administration of accounts for authorized users to access the appropriate data.
• B.The policy should describe the roles and responsibilities between users and managers, and the management of specific data types.
• C.The policy should document practices that users must adhere to in order to access data on the corporate network or Internet.
• D.The policy should establish the protocol for retaining information types based on regulatory or business needs.

During a review of security controls, an analyst was able to connect to an external, unsecured FTP server from a workstation. The analyst was troubleshooting and reviewed the ACLs of the segment firewall the workstation is connected to:

Based on the ACLs above, which of the following explains why the analyst was able to connect to the FTP server?

• A.FTP was allowed as being included in Seq 3 and Seq 4 of the ACL.
• B.FTP was allowed in Seq 10 of the ACL.
• C.FTP was explicitly allowed in Seq 8 of the ACL.
• D.FTP was allowed as being outbound from Seq 9 of the ACL.

A server contains baseline images that are deployed to sensitive workstations on a regular basis. The images are evaluated once per month for patching and other fixes, but do not change otherwise. Which of the following controls should be put in place to secure the file server and ensure the images are not changed?

• A.Schedule vulnerability scans of the server at least once per month before the images are updated.
• B.Install a honeypot to identify any attacks before the baseline images can be compromised.
• C.Install and configure a file integrity monitoring tool on the server and allow updates to the images each month.
• D.Require the use of two-factor authentication for any administrator or user who needs to connect to the server.

A security audit revealed that port 389 has been used instead of 636 when connecting to LDAP for the authentication of users. The remediation recommended by the audit was to switch the port to 636 wherever technically possible. Which of the following is the BEST response?

• A.Change all devices and servers that support it to 636, as 389 is a reserved port that requires root access and can expose the server to privilege escalation attacks.
• B.Change all devices and servers that support it to 636, as encrypted services run by default on 636.
• C.Correct the audit. This finding is a well-known false positive; the services that typically run on 389 and 636 are identical.
• D.Correct the audit. This finding is accurate, but the correct remediation is to update encryption keys on each of the servers to match port 636.