Free CompTIA CS0-004 Practice Test & Real Exam Questions

Given the following report:

Which of the following vulnerabilities should be prioritized for immediate remediation?

Which of the following security controls should be classified as operational?

A vendor releases details of a new vulnerability. When an analyst reviews the scheduled scans, no vulnerabilities are identified. The vulnerability is only discovered after a configuration change.
Which of the following scan types did the analyst configure?

A vulnerability analyst conducts a security assessment on the Remote Desktop Protocol (RDP) security posture within the environment. The analyst issues the following command for the assessment:
nmap -p 3389 --script rdp* 10.0.0.0/24
The analyst receives responses, which are divided into one of the two categories, from 13 out of the 254 hosts:

Which of the following conclusions can the analyst make about the output on Category 2?

The vulnerability management team must scan the cloud environment to establish security baselines. Which of the following assessment tools should the team use to perform this task?

There is an alert coming from the security information and event management system. Which of the following is the first task an analyst should complete?

While reviewing logs, a SOC analyst notices traffic that is attempting connections to all hosts on ports 1-65535. Which of the following steps of the Cyber Kill Chain is most likely occurring?

Users frequently get disconnected from the company's internal wireless network. The wireless system and clients are healthy. Once disconnected, the wireless clients reconnect automatically.
Which of the following is the best way for a security analyst to determine the source of the wireless disconnection?

A security operations center (SOC) manager reviews a document signed by the Chief Financial Officer (CFO), the sales director, and a customer to decide whether a contract breach occurred.
Which of the following best describes the document that includes key performance indicators (KPIs)?

A threat intelligence analyst needs to gather TTPs from attackers. Which of the following is the most comprehensive resource for this task?