Free Curam Software CS0-003 Exam Dumps Questions & Answers

Which of the following describes the importance of an organization understanding SLOs when outsourcing incident response to a third party?

• A.To understand the hidden costs of an SLA
• B.To track the performance of specific KPIs
• C.To quantify the risk appetite in an MOU
• D.To ensure that an objective risk score can be calculated

Which of the following can be used to learn more about TTPs used by cybercriminals?

• A.ZenMAP
• B.National Institute of Standards and Technology
• C.MITRE ATT & CK
• D.theHarvester

A company is concerned with finding sensitive file storage locations that are open to the public. The current internal cloud network is flat. Which of the following is the best solution to secure the network?

• A.Implement segmentation with ACLs.
• B.Roll out an IDS.
• C.Configure logging and monitoring to the SIEM.
• D.Deploy MFA to cloud storage locations.

Which of the following statements best describes the MITRE ATT & CK framework?

• A.It helps identify and stop enemy activity by highlighting the areas where an attacker functions.
• B.It breaks down intrusions into a clearly defined sequence of phases.
• C.It provides threat intelligence sharing and development of action and mitigation strategies.
• D.It tracks and understands threats and is an open-source project that evolves.
• E.It provides a comprehensive method to test the security of applications.

A security analyst provides the management team with an after-action report for a security incident. Which of the following is the management team most likely to review in order to correct validated issues with the incident response processes?

• A.Tabletop exercise
• B.Root cause analysis
• C.Lessons learned
• D.Forensic analysis