CS0-002 試験問題を無料オンラインアクセス

Which of the following is the BEST way to gather patch information on a specific server?

• A.Event Viewer
• B.SCAP software
• C.CI/CD
• D.Custom script

An incident response team detected malicious software that could have gained access to credit card dat a. The incident response team was able to mitigate significant damage and implement corrective actions. By having incident response mechanisms in place. Which of the following should be notified for lessons learned?

• A.Customers
• B.The human resources department
• C.Company leadership
• D.The legal team

According to a static analysis report for a web application, a dynamic code evaluation script injection vulnerability was found. Which of the following actions is the BEST option to fix the vulnerability in the source code?

• A.Delete the vulnerable section of the code immediately.
• B.Validate user input before execution and interpretation.
• C.Create a custom rule on the web application firewall.
• D.Use parameterized queries.

An organization wants to ensure the privacy of the data that is on its systems Full disk encryption and DLP are already in use Which of the following is the BEST option?

• A.Require all remote employees to sign an NDA
• B.Update the AUP to restrict data sharing
• C.Enforce geofencing to limit data accessibility
• D.Require users to change their passwords more frequently

At which of the following phases of the SDLC shoukJ security FIRST be involved?

• A.Implementation
• B.Testing
• C.Design
• D.Analysis
• E.Planning
• F.Maintenance