Online Access Free CS0-001 Practice Test

A network technician is concerned that an attacker is attempting to penetrate the network, and wants to set a rule on the firewall to prevent the attacker from learning which IP addresses are valid on the network. Which of the following protocols needs to be denied?

• A.ARP
• B.ICMP
• C.SMTP
• D.TCP

An organization is requesting the development of a disaster recovery plan. The organization has grown and so has its infrastructure. Documentation, policies, and procedures do not exist. Which of the following steps should be taken to assist in the development of the disaster recovery plan?

• A.Execute vulnerability scanning.
• B.Identify assets.
• C.Develop a data retention policy.
• D.Conduct a risk assessment.

Due to new regulations, a company has decided to institute an organizational vulnerability management program and assign the function to the security team. Which of the following frameworks would BEST support the program? (Choose two.)

• A.ISO 27000 series
• B.NIST
• C.ITIL
• D.COBIT
• E.COSO

Which of the following is a technology used to provide Internet access to internal associates without exposing the Internet directly to the associates?

• A.Vulnerability scanner
• B.Intrusion prevention system
• C.Web proxy
• D.Fuzzer

An analyst is reviewing a list of vulnerabilities, which were reported from a recent vulnerability scan of a Linux server.
Which of the following is MOST likely to be a false positive?

• A.HTTP TRACE / TRACK Methods Allowed (002-1208)
• B.OpenSSH/OpenSSL Package Random Number Generator Weakness
• C.SSL Certificate Expiry
• D.GDI+ Remote Code Execution Vulnerability (MS08-052)
• E.Apache HTTP Server Byte Range DoS