CS0-004 試験問題を無料オンラインアクセス

As part of a quality assurance test, a developer wants to examine how the code behaves after an application has been fully compiled and is running. Which of the following best describes the type of testing that the developer should perform?

• A.Dynamic
• B.Diagnostic
• C.Static
• D.Black box

A security analyst needs to identify the devices in a critical infrastructure network that handles an oil and gas pipeline. The network has devices connected over IPv4 using either HTTP or Modbus protocols running on the standard ports. Which of the following approaches should the analyst use to achieve the objective?

• A.Perform an nmap -T2 -A -p 80,502
• B.Scan the ICS network using masscan --open-only -p80,502
• C.Employ the IT vulnerability scanner to target ports 80 and 502
• D.Use banner grabbing with netcat on TCP ports 80 and 502

Which of the following is the most important reason why tactics, techniques, and procedures (TTP) are beneficial to a defensive strategy?

• A.TTP provides useful insights on the tools used by an attacker.
• B.TTP provides useful insights on the strategy and behavior of an attacker.
• C.TTP provides useful insights on the hash values and internet protocol addresses attributed to an attacker.
• D.TTP provides useful insights on an attacker's indicators of compromise.

An analyst is configuring a security information and event management system to capture fileless malware execution events. Which of the following log files requires additional configuration to accomplish this task?

• A.Microsoft-Windows-TerminalServices-LocalSessionManager/Operational
• B.Microsoft-Windows-PowerShell/Operational
• C.Microsoft-Windows-Crypto-DPAPI/Operational
• D.Microsoft-Windows-UserPnp/DeviceInstall

Given the following report:

Which of the following vulnerabilities should be prioritized for immediate remediation?

• A.SQL injection in the financial processing module
• B.Remote code execution via file upload
• C.Information disclosure
• D.Privilege escalation in OS kernel