Online Access Free CS0-002 Practice Test

A current, validated DLP solution Is now in place because of a previous data breach However, a new data breach has taken place The following symptoms were observed shorty after a recent sales meeting:
* Sensitive corporate documents appeared on the dark web.
* Unusually large packets of data were being sent out.
Which of the following is most likely occurring?

• A.An insider threat is exfiltration data.
• B.The DLP solution is not configured for unsecured web traffic
• C.File audits are not enabled on CASB.
• D.Documents are not tagged properly to restrict sharing.

A security analyst identified some potentially malicious processes after capturing the contents of memory from a machine during incident response. Which of the following procedures is the NEXT step for further in investigation?

• A.File cloning
• B.Reverse engineering
• C.Timeline construction
• D.Data carving

Which of the following control types is an organization using when restoring a backup?

• A.Corrective
• B.Preventive
• C.Responsive
• D.Technical

The management team has asked a senior security engineer to explore DLP security solutions for the company's growing use of cloud-based storage. Which of the following is an appropriate solution to control the sensitive data that is being stored in the cloud?

• A.NAC
• B.WAF
• C.CASB
• D.IPS

A security analyst discovers suspicious activity going to a high-value corporate asset. After reviewing the traffic, the security analyst identifies that malware was successfully installed on a machine. Which of the following should be completed first?

• A.Create an IPS signature of the malware file.
• B.Contact the systems administrator.
• C.Remove the malware from the host.
• D.Create an IDS signature of the malware file.