Instant Access CuramSoftware.CS0-003.v2025-06-17.q209 Actual Practice Test Engine for Free (Page 33)

Question 156

Which Of the following techniques would be best to provide the necessary assurance for embedded software that drives centrifugal pumps at a power Plant?

A.Containerization
B.Manual code reviews
C.Static and dynamic analysis
D.Formal methods

Question 157

A security analyst receives an alert for suspicious activity on a company laptop An excerpt of the log is shown below:

Which of the following has most likely occurred?

A.An Office document with a malicious macro was opened.
B.A credential-stealing website was visited.
C.A phishing link in an email was clicked
D.A web browser vulnerability was exploited.

Correct Answer: A

An Office document with a malicious macro was opened is the most likely explanation for the suspicious activity on the company laptop, as it reflects the common technique of using macros to execute PowerShell commands that download and run malware. A macro is a piece of code that canautomate tasks or perform actions in an Office document, such as a Word file or an Excel spreadsheet. Macros can be useful and legitimate, but they can also be abused by threat actors to deliver malware or perform malicious actions on the system. A malicious macro can be embedded in an Office document that is sent as an attachment in a phishing email or hosted on a compromised website. When the user opens the document, they may be prompted to enable macros or content, which will trigger the execution of the malicious code. The malicious macro can then use PowerShell, which is a scripting language and command-line shell that is built into Windows, to perform various tasks, such as downloading and running malware from a remote URL, bypassing security controls, or establishing persistence on the system. The log excerpt shows that PowerShell was used to download a string from a URL using the WebClient.DownloadString method, which is a common way to fetch and execute malicious code from the internet. The log also shows that PowerShell was used to invoke an expression (iex) that contains obfuscated code, which is another common way to evade detection and analysis.
The other options are not as likely as an Office document with a malicious macro was opened, as they do not match the evidence in the log excerpt. A credential-stealing website was visited is possible, but it does not explain why PowerShell was used to download and execute code from a URL. A phishing link in an email was clicked is also possible, but it does not explain what happened after the link was clicked or how PowerShell was involved. A web browser vulnerability was exploited is unlikely, as it does not explain why PowerShell was used to download and execute code from a URL.

Question 158

During a scan of a web server in the perimeter network, a vulnerability was identified that could be exploited over port 3389. The web server is protected by a WAF. Which of the following best represents the change to overall risk associated with this vulnerability?

A.The risk would not change because network firewalls are in use.
B.The risk would decrease because RDP is blocked by the firewall.
C.The risk would decrease because a web application firewall is in place.
D.The risk would increase because the host is external facing.

Question 159

Which of the following is the best way to begin preparation for a report titled "What We Learned" regarding a recent incident involving a cybersecurity breach?

A.Determine the sophistication of the audience that the report is meant for
B.Include references and sources of information on the first page
C.Include a table of contents outlining the entire report
D.Decide on the color scheme that will effectively communicate the metrics

Question 160

While reviewing the web server logs a security analyst notices the following snippet
..\../..\../boot.ini
Which of the following is being attempted?

A.Directory traversal
B.Remote file inclusion
C.Cross-site scripting
D.Remote code execution
E.Enumeration of/etc/pasawd

Question 156

Question 157

Question 158

Question 159

Question 160

Download PDF File