次の認定試験に速く合格する！

簡単に認定試験を準備し、学び、そして合格するためにすべてが必要だ。

会員センターカート (0)

CS0-003 無料問題集「CompTIA Cybersecurity Analyst (CySA+) Certification」

ページ: 1 / 31
トータル 555 問

サインアップ、ログインされた後に、試験全体を無料で表示できるようになります。

質問 1

During a security test, a security analyst found a critical application with a buffer overflow vulnerability. Which of the following would be best to mitigate the vulnerability at the application level?

（A）Implement input validation.

（B）Configure address space layout randomization.

（C）Perform OS hardening.

（D）Update third-party dependencies.

正解：A 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 2

A security analyst found the following vulnerability on the company's website:
<INPUT TYPE="IMAGE" SRC="javascript:alert(`test');">
Which of the following should be implemented to prevent this type of attack in the future?

（A）Output encoding

（B）Prepared statements

（C）Code obfuscation

（D）Input sanitization

正解：D 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 3

A company recently removed administrator rights from all of its end user workstations. An analyst uses CVSSv3.1 exploitability metrics to prioritize the vulnerabilities for the workstations and produces the following information:

Which of the following vulnerabilities should be prioritized for remediation?

（A）great.skills

（B）sweet.bike

（C）nessie.explosion

（D）vote.4p

正解：C 解答を投票する

質問 4

An analyst receives an alert for suspicious IIS log activity and reviews the following entries:
2024-05-23 15:57:05 10.203.10.16 HEAT / - 80 - 10.203.10.17 DirBuster-
1.0-
RC1+(http://www.owasp.org/index.php/Category:OWASP_DirBuster_Project) .
..
Which of the following will the analyst infer from the logs?

（A）An attacker is conducting reconnaissance of the website.

（B）An attacker is cloning the website.

（C）An attacker is exfiltrating data from the network.

（D）An attacker is performing network lateral movement.

正解：A 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 5

An employee accessed a website that caused a device to become infected with invasive malware. The incident response analyst has:
- created the initial evidence log.
- disabled the wireless adapter on the device.
- interviewed the employee, who was unable to identify the website that was accessed.
- reviewed the web proxy traffic logs.
Which of the following should the analyst do to remediate the infected device?

（A）Install an additional malware scanner that will send email alerts to the analyst.

（B）Configure the system to use a proxy server for Internet access.

（C）Delete the user profile and restore data from backup.

（D）Update the system firmware and reimage the hardware.

正解：D 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 6

An email hosting provider added a new data center with new public IP addresses. Which of the following most likely needs to be updated to ensure emails from the new data center do not get blocked by spam filters?

（A）SPF

（B）DMARC

（C）SMTP

（D）DKIM

正解：A 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 7

A cybersecurity analyst is doing triage in a SIEM and notices that the time stamps between the firewall and the host under investigation are off by 43 minutes. Which of the following is the most likely scenario occurring with the time stamps?

（A）The cybersecurity analyst is looking at the wrong information

（B）The NTP server is not configured on the host

（C）The host with the logs is offline

（D）The firewall is using UTC time

正解：B 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 8

A security analyst observed the following activities in chronological order:
1. Protocol violation alerts on external firewall
2. Unauthorized internal scanning activity
3. Changes in outbound network performance
Which of the following best describes the goal of the threat actor?

（A）Data exfiltration

（B）Unusual traffic spikes

（C）Rogue devices

（D）Irregular peer-to-peer communication

正解：A 解答を投票する

質問 9

An analyst is conducting routine vulnerability assessments on the company infrastructure. When performing these scans, a business-critical server crashes, and the cause is traced back to the vulnerability scanner. Which of the following is the cause of this issue?

（A）The scanner is configured with a scanning window

（B）The scanner is running in active mode.

（C）The scanner is running without an agent installed.

（D）The scanner is segmented improperly

正解：B 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 10

A new cybersecurity analyst is tasked with creating an executive briefing on possible threats to the organization. Which of the following will produce the data needed for the briefing?

（A）Risk assessment

（B）Access control lists

（C）Firewall logs

（D）Indicators of compromise

正解：D 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 11

A security administrator has found indications of dictionary attacks against the company's external-facing portal. Which of the following should be implemented to best mitigate the password attacks?

（A）Multifactor authentication

（B）Lockout policy

（C）Password complexity

（D）Web application firewall

正解：B 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 12

A regulated organization experienced a security breach that exposed a list of customer names with corresponding PII data. Which of the following is the best reason for developing the organization's communication plans?

（A）For the organization's public relations department to have a standard notification

（B）To ensure incidents are immediately reported to a regulatory agency

（C）To automate the notification to customers who were impacted by the breach

（D）To have approval from executive leadership on when communication should occur

正解：B 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 13

After updating the email client to the latest patch, only about 15% of the workforce is able to use email. Windows 10 users do not experience issues, but Windows 11 users have constant issues.
Which of the following did the change management team fail to do?

（A）Implementation

（B）Validation

（C）Rollback

（D）Testing

正解：D 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 14

Which of the following describes the best reason for conducting a root cause analysis?

（A）The root cause analysis allows the incident to be properly documented for reporting.

（B）The root cause analysis develops recommendations to improve the process.

（C）The root cause analysis identifies the contributing items that facilitated the event.

（D）The root cause analysis ensures that proper timelines were documented.

正解：C 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 15

A security analyst is reviewing a firewall usage report that contains traffic generated over the last
30 minutes in order to locate unusual traffic patterns:

Which of the following source IP addresses does the analyst need to investigate further?

（A）192.168.48.147

（B）192.168.100.5

（C）10.18.76.179

（D）10.50.180.49

正解：A 解答を投票する

質問 16

Which of the following would eliminate the need for different passwords for a variety or internal application?

（A）PAM

（B）MFA

（C）SSO

（D）CASB

正解：C 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 17

A company's internet-facing web application has been compromised several times due to identified design flaws. The company would like to minimize the risk of these incidents from reoccurring and has provided the developers with better security training. However, the company cannot allocate any more internal resources to the issue. Which of the following are the best options to help identify flaws within the system? (Choose two.)

（A）Holding a tabletop exercise

（B）Creating a bug bounty program

（C）Performing a forensic analysis

（D）Contracting a penetration test

（E）Deploying a WAF

（F）Implementing threat modeling

正解：B、D 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 18

A web application team notifies a SOC analyst that there are thousands of HTTP/404 events on the public-facing web server. Which of the following is the next step for the analyst to take?

（A）Identify the IP/hostname for the requests and look at the related activity

（B）Instruct the firewall engineer that a rule needs to be added to block this external server

（C）Escalate the event to an incident and notify the SOC manager of the activity

（D）Notify the incident response team that there is a DDoS attack occurring

正解：A 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

ページ: 1 / 31
トータル 555 問

CS0-003 の機能をすべて解除する

キャプチャ不要
365日無料更新サービス
希望する合格率を設定できる
時間の割り当てられる（時間：分）
CS0-003 に2つの練習用モード
サポートサービス対応

完全版を入手する

弊社を連絡する

我々は１２時間以内ですべてのお問い合わせを答えます。

オンラインサポート時間：( UTC+9 ) 9:00-24:00
月曜日から土曜日まで

サポート：現在連絡

トップ試験

NSE7_SDW-7.2 試験問題集
H19-401_V1.0 試験問題集
CS0-003 試験問題集
IT-Risk-Fundamentals 試験問題集
Information-Technology-Management 試験問題集
N10-009 試験問題集

CS0-003 無料問題集「CompTIA Cybersecurity Analyst (CySA+) Certification」

弊社を連絡する

関連リンク

トップ試験