CS0-002 무료 덤프문제 온라인 액세스

A security analyst identified one server that was compromised and used as a data making machine, and a few of the hard drive that was created. Which of the following will MOST likely provide information about when and how the machine was compromised and where the malware is located?

• A.Volatile memory analysts
• B.System timeline reconstruction
• C.Data carving
• D.System registry extraction

Which of following allows Secure Boot to be enabled?

• A.PAM
• B.MSM
• C.UEFI
• D.eFuse

A company's Chief Information Security Officer [CISO) is concerned about the integrity of some highly confidential files. Any changes to these files must be tied back to a specific authorized user's activity session. Which of the following is the best technique to address the ClSO's concerns?

• A.Configure DLP to reject all changes to the files without pre-authorization. Monitor the files for unauthorized changes.
• B.Place a legal hold on the files Require authorized users to abide by a strict time context access policy. Monitor the files for unauthorized changes.
• C.Use Wireshark to scan all traffic to and from the directory. Monitor the files for unauthorized changes.
• D.Regularly use SHA-256 to hash the directory containing the sensitive information. Monitor the files for unauthorized changes.

While implementing a PKI for a company, a security analyst plans to utilize a dedicated server as the certAcate authority that is only used to sign intermediate certificates. Which of the following are the MOST secure states for the certificate authority server when it is not in use? (Select TWO)

• A.VPN accessible only
• B.Powered off
• C.Backed up hourly
• D.On a private VLAN
• E.Full disk encrypted
• F.Air gapped

Which of the following should a database administrator for an analytics firm implement to best protect PII from an insider threat?

• A.Data deidentification
• B.Data auditing
• C.Data encryption
• D.Data minimization