Online Access Free CS0-004 Practice Test

A security team deploys a new scanning solution that requires root, domain administrator, and local server administrator permissions on all systems. Which of the following is the best way to help mitigate the risk for this level of access?

• A.Integrating token-based authentication using a privileged access management (PAM) solution
• B.Enabling single sign-on for all administrators
• C.Using temporary, one-time passwords as part of the login process
• D.Configuring agentless scanning for critical targets

A security director at a remote company is concerned about recent threat intelligence reports regarding threat actors who are hired by the company and steal intellectual property. Which of the following solutions are the best ways to identify the tactics, techniques, and procedures (TTPs) used by these threat actors? (Choose two.)

• A.Deploying a fully featured endpoint detection and response (EDR)
• B.Subscribing to an identity proofing service for all employees
• C.Utilizing user behavioral analytics-based detections implemented in the security information and event management (SIEM)
• D.Installing and configuring a data loss prevention tool
• E.Validating identification information manually
• F.Conducting thorough background checks on all incoming employees

A cybersecurity analyst is reviewing static application security testing scan results and notices a finding for hard-coded credentials. Which of the following should the analyst recommend to the application team to resolve this concern?

• A.Integrate secrets management.
• B.Obfuscate application programming interface keys.
• C.Enable single sign-on.
• D.Implement a privileged access management solution.

Two organizations are assessing a partnership to exchange security information and share resources in case an incident occurs. The assessment is in the pre-contract stage, and no detailed definitions have been made by management. Which of the following is the best artifact to formalize the agreement at the current stage?

• A.SLA
• B.NDA
• C.SLO
• D.MOU

A company's Zero Trust network requires reauthentication with MFA every two hours. Which of the following is an advantage of this architecture?

• A.Increases the accuracy of user and device asset inventories
• B.Rotates the encryption key to prevent brute forcing
• C.Reduces the time an attacker can use compromised credentials
• D.Prevents the recurring use of rainbow tables