CS0-001 무료 덤프문제 온라인 액세스

During a tabletop exercise, it is determined that a security analyst is required to ensure patching and scan reports are available during an incident, as well as documentation of all critical systems. To which of the following stakeholders should the analyst provide the reports?

• A.Management
• B.Affected vendors
• C.Security operations
• D.Legal

File integrity monitoring states the following files have been changed without a written request or approved change. The following change has been made:
chmod 777 -Rv /usr
Which of the following may be occurring?

• A.Administrative functions have been locked from users.
• B.The ownership of/usr has been changed to the root user.
• C.Administrative commands have been made world readable/writable.
• D.The ownership pf /usr has been changed to the current user.

A security audit revealed that port 389 has been used instead of 636 when connecting to LDAP for the authentication of users. The remediation recommended by the audit was to switch the port to 636 wherever technically possible. Which of the following is the BEST response?

• A.Change all devices and servers that support it to 636, as 389 is a reserved port that requires root access and can expose the server to privilege escalation attacks.
• B.Correct the audit. This finding is accurate, but the correct remediation is to update encryption keys on each of the servers to match port 636.
• C.Change all devices and servers that support it to 636, as encrypted services run by default on 636.
• D.Correct the audit. This finding is a well-known false positive; the services that typically run on 389 and 636 are identical.

Company A's security policy states that only PKI authentication should be used for all SSH accounts. A security analyst from Company A is reviewing the following auth.log and configuration settings:

Which of the following changes should be made to the following sshd_config file to establish compliance with the policy?

• A.Change #AuthorizedKeysFile sh/.ssh/authorized_keys to AuthorizedKeysFile sh/.ssh/authorized_keys
• B.Change PermitRootLogin no to #PermitRootLogin yes
• C.Change ChallengeResponseAuthentication yes to ChallangeResponseAuthentication no
• D.Change PassworAuthentication yes to PasswordAuthentication no
• E.Change PubkeyAuthentication yes to #PubkeyAuthentication yes

A security analyst is reviewing IDS logs and notices the following entry:

Which of the following attacks is occurring?

• A.XML injection
• B.Cross-site scripting
• C.SQL injection
• D.Header manipulation