CS0-001 Analyst Practice Questions

A cybersecurity analyst has received the laptop of a user who recently left the company. The analyst types ‘history’ into the prompt, and sees this line of code in the latest bash history: This concerns the analyst because this subnet should not be known to users within the company. Which of the following describes what this code has done on the network?

• AA. Performed a ping sweep of the Class C network.
• BB. Performed a half open SYB scan on the network.
• CC. Sent 255 ping packets to each host on the network.
• DD. Sequentially sent an ICMP echo reply to the Class C network.

A cybersecurity analyst is completing an organization’s vulnerability report and wants it to reflect assets accurately. Which of the following items should be in the report?

• AA. Processor utilization
• BB. Virtual hosts
• CC. Organizational governance
• DD. Log disposition
• EE. Asset isolation

Creating a lessons learned report following an incident will help an analyst to communicate which of the following information? (Select TWO)

Select 2 answers.

• AA. Root cause analysis of the incident and the impact it had on the organization
• BB. Outline of the detailed reverse engineering steps for management to review
• CC. Performance data from the impacted servers and endpoints to report to management
• DD. Enhancements to the policies and practices that will improve business responses
• EE. List of IP addresses, applications, and assets

As part of an upcoming engagement for a client, an analyst is configuring a penetration testing application to ensure the scan complies with information defined in the SOW. Which of the following types of information should be considered based on information traditionally found in the SOW? (Select two.)

Select 2 answers.

• AA. Timing of the scan
• BB. Contents of the executive summary report
• CC. Excluded hosts
• DD. Maintenance windows
• EE. IPS configuration
• FF. Incident response policies

A cybersecurity analyst traced the source of an attack to compromised user credentials. Log analysis revealed that the attacker successfully authenticated from an unauthorized foreign country. Management asked the security analyst to research and implement a solution to help mitigate attacks based on compromised passwords. Which of the following should the analyst implement?

• AA. Self-service password reset
• BB. Single sign-on
• CC. Context-based authentication
• DD. Password complexity