New Year Special 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: save70

Online CS0-001 Questions Video

Page: 5 / 17
Total 455 questions

CompTIA CSA+ Certification Exam Questions and Answers

Question 17

A security professional is analyzing the results of a network utilization report. The report includes the following information:

Which of the following servers needs further investigation?

Options:

A.

hr.dbprod.01

B.

R&D.file.srvr.01

C.

mrktg.file.srvr.02

D.

web.srvr.03

Question 18

An organization has recently recovered from an incident where a managed switch had been accessed and reconfigured without authorization by an insider. The incident response team is working on developing a lessons learned report with recommendations. Which of the following recommendations will BEST prevent the same attack from occurring in the future?

Options:

A.

Remove and replace the managed switch with an unmanaged one.

B.

Implement a separate logical network segment for management interfaces.

C.

Install and configure NAC services to allow only authorized devices to connect to the network.

D.

Analyze normal behavior on the network and configure the IDS to alert on deviations from normal.

Question 19

A cybersecurity analyst is completing an organization’s vulnerability report and wants it to reflect assets accurately. Which of the following items should be in the report?

Options:

A.

Processor utilization

B.

Virtual hosts

C.

Organizational governance

D.

Log disposition

E.

Asset isolation

Question 20

Which of the following BEST describes the offensive participants in a tabletop exercise?

Options:

A.

Red team

B.

Blue team

C.

System administrators

D.

Security analysts

E.

Operations team

Page: 5 / 17
Total 455 questions