Free CompTIA CS0-002 Exam Dumps Questions & Answers

A security analyst is investigating an active threat of the system memory. While narrowing down the source of the threat, the analyst is inspecting all processes to isolate suspicious activity Which of the following techniques is the analyst using?

• A.Live forensics
• B.Static acquisition
• C.Logical acquisition
• D.Timeline analysis

An analyst is coordinating with the management team and collecting several terabytes of data to analyze using advanced mathematical techniques in order to find patterns and correlations in events and activities. Which of the following describes what the analyst is doing?

• A.SOAR
• B.Machine learning
• C.Data visualization
• D.SCAP

A current, validated DLP solution Is now in place because of a previous data breach However, a new data breach has taken place The following symptoms were observed shorty after a recent sales meeting:
* Sensitive corporate documents appeared on the dark web.
* Unusually large packets of data were being sent out.
Which of the following is most likely occurring?

• A.An insider threat is exfiltration data.
• B.File audits are not enabled on CASB.
• C.Documents are not tagged properly to restrict sharing.
• D.The DLP solution is not configured for unsecured web traffic

In SIEM software, a security analysis selected some changes to hash signatures from monitored files during the night followed by SMB brute-force attacks against the file servers Based on this behavior, which of the following actions should be taken FIRST to prevent a more serious compromise?

• A.Collect the network traffic during the day to understand if the same activity is also occurring during business hours
• B.Collect all the files that have changed and compare them with the previous baseline
• C.Fully segregate the affected servers physically in a network segment, apart from the production network.
• D.Check the hash signatures, comparing them with malware databases to verify if the files are infected.

To validate local system-hardening requirements, which of the following types of vulnerability scans would work BEST to verify the scanned device meets security policies?

• A.SAST
• B.DAST
• C.SCAP
• D.DACS