CS0-001 試験問題を無料オンラインアクセス

A company has recently launched a new billing invoice website for a few key vendors. The cybersecurity analyst is receiving calls that the website is performing slowly and the pages sometimes time out. The analyst notices the website is receiving millions of requests, causing the service to become unavailable. Which of the following can be implemented to maintain the availability of the website?

• A.Whitelisting
• B.Honeypot
• C.VPN
• D.MAC filtering
• E.DMZ

An analyst is observing unusual network traffic from a workstation. The workstation is communicating with a known malicious site over an encrypted tunnel. A full antivirus scan with an updated antivirus signature file does not show any sign of infection. Which of the following has occurred on the workstation?

• A.Cookie stealing
• B.Session hijack
• C.Zero-day attack
• D.Known malware attack

Risk management wants IT to implement a solution that will permit an analyst to intercept, execute, and analyze potentially malicious files that are downloaded from the Internet.
Which of the following would BEST provide this solution?

• A.Decomposition of malware
• B.Sandboxing
• C.File fingerprinting
• D.Risk evaluation

A security analyst Is trying to capture network traffic In a web server that is suspected of using the DNS service for exfiltrating Information out of the network. The server usually transfers several gigabytes of data per day. and the analyst wants the size of the capture to be as reduced as possible. Which of the following commands should the analyst use to achieve such goals?

• A.tcpdump port 53 -i eth0 -w evidencel.pcap
• B.tcpdump tcp port 53 -i eth0 -w evidencel.pcap
• C.tcpdump -i echo -w evidencel.pcap
• D.tcpdump udp port 53 -i eth0 -w evidencel.pcap

Which of the following are essential components within the rules of engagement for a penetration test? (Select TWO).

• A.Schedule
• B.List of system administrators
• C.Business justification
• D.Payment terms
• E.Authorization