CS0-001 Exam Dumps - CompTIA CySA+ Certification Exam
During a physical penetration test at a client site, a local law enforcement officer stumbled upon the test questioned the legitimacy of the team.
Which of the following information should be shown to the officer?
A logistics company’s vulnerability scan identifies the following vulnerabilities on Internet-facing devices in the DMZ:
- SQL injection on an infrequently used web server that provides files to vendors
- SSL/TLS not used for a website that contains promotional information
The scan also shows the following vulnerabilities on internal resources:
- Microsoft Office Remote Code Execution on test server for a human resources system
- TLS downgrade vulnerability on a server in a development network
In order of risk, which of the following should be patched FIRST?
An organization wants to perform network scans to Identify active hosts and vulnerabilities. Management places the highest priority on scans that mimic how an attack would progress. Iftime and resources allow, subsequent scans can be performed using different techniques and methods. Which of the following scan types and sequences would BEST suit the organization's requirements?
The following IDS log was discovered by a company’s cybersecurity analyst:
Which of the following was launched against the company based on the IDS log?
Which of the following tools should an analyst use to scan for web server vulnerabilities?
A security analyst has been asked to scan a subnet. During the scan, the following output was generated:
Based on the output above, which of the following is MOST likely?
Which of the following is the use of tools to simulate the ability for an attacker to gain access to a specified network?
In order to meet regulatory compliance objectives for the storage of PHI, vulnerability scans must be conducted on a continuous basis. The last completed scan of the network returned 5,682 possible vulnerabilities. The Chief Information Officer (CIO) would like to establish a remediation plan to resolve all known issues. Which of the following is the BEST way to proceed?