CompTIA CS0-001 Actual Questions

The networking team should update the WAF to block directory traversal.

The development team should implement input sanitation on all web forms.

The server administration team should scan for malware on the server.

The security team should update the IPS to prevent network enumeration.

To comply with existing organization policies and procedures on interacting with internal and external parties

To ensure all parties know their roles and effective lines of communication are established

To identify which group will communicate details to law enforcement in the event of a security incident

To predetermine what details should or should not be shared with internal or external parties in the event of an incident

The user opened an infected PDF file from a personal webmail account.

The user Installed an infected version of Mozilla Firefox from a flash drive.

An attacker used mimikatz to steal Kerberos tokens from the lsass.exe process.

An Insider Is running a PowerShell script to steal user credentials.

Create an SLA stating that remediation actions must occur within 30 days of discovery for all levels of vulnerabilities.

Incorporate prioritization levels into the remediation process and address critical findings first.

Create classification criteria for data residing on different servers and provide remediation only for servers housing sensitive data.

Implement a change control policy that allows the security team to quickly deploy patches in the production environment to reduce the risk of any vulnerabilities found.