Question 1

A security analyst has determined the security team should take action based on the following log:

Which of the following should be used to improve the security posture of the system?

Options :

A : Enable login account auditing.

B : Limit the number of unsuccessful login attempts.

C : Upgrade the firewalls.

D : Increase password complexity requirements.

Answer: B

Question 2

A threat intelligence analyst who works for an oil and gas company has received the following email

from a superior:

“We will be connecting our IT network with our ICS. Our IT security has historically been top of the

line, and this convergence will make the ICS easier to manage and troubleshoot. Can you please

perform a risk/vulnerability assessment on this decision?”

Which of the following is MOST accurate regarding ICS in this scenario?

Options :

A : Convergence decreases attack vectors

B : Integrating increases the attack surface

C : IT networks cannot be connected to ICS infrastructure

D : Combined networks decrease efficiency

Answer: B

Question 3

Which of the following is a vulnerability that is specific to hypervisors?

Options :

A : DDoS

B : VLAN hopping

C : Weak encryption

D : WMescape

Answer: D

Question 4

A computer at a company was used to commit a crime. The system was seized and removed for

further analysis. Which of the following is the purpose of labeling cables and connections when

seizing the computer system?

Options :

A : To capture the system configuration as it was at the time it was removed

B : To maintain the chain of custody

C : To block any communication with the computer system from attack

D : To document the model, manufacturer, and type of cables connected

Answer: B

Question 5

A security administrator determines several months after the first instance that a local privileged

user has been routinely logging into a server interactively as “root” and browsing the Internet. The

administrator determines this by performing an annual review of the security logs on that server. For

which of the following security architecture areas should the administrator recommend review and

modification? (Select TWO).

Options :

A : Log aggregation and analysis

B : Software assurance

C : Encryption

D : Acceptable use policies

E : Password complexity

F : Network isolation and separation

Answer: A,D

Smartly Prepare Exam with Free Online CS0-001 Practice Test

Buying Options: