Online CS0-001 Questions Video

Page: 11 / 16

Question 44

During an investigation, a computer is being seized. Which of the following is the FIRST step the analyst should take?

Options:

Power off the computer and remove it from the network.

Unplug the network cable and take screenshots of the desktop.

Perform a physical hard disk image.

Initiate chain-of-custody documentation.

Question 45

A staff member reported that a laptop has degraded performance. The security analyst has investigated the issue and discovered that CPU utilization, memory utilization, and outbound network traffic are consuming the laptop resources. Which of the following is the BEST course of actions to resolve the problem?

Options:

Identify and remove malicious processes.

Disable scheduled tasks.

Suspend virus scan.

Increase laptop memory.

Ensure the laptop OS is properly patched.

Question 46

A company allows employees to work remotely. The security administration is configuring services that will allow remote help desk personnel to work secure outside the company’s headquarters. Which of the following presents the BEST solution to meet this goal?

Options:

Configure a VPN concentrator to terminate in the DMZ to allow help desk personnel access to resources.

Open port 3389 on the firewall to the server to allow users to connect remotely.

Set up a jump box for all help desk personnel to remotely access system resources.

Use the company’s existing web server for remote access and configure over port 8080.

Question 47

A cybersecurity analyst is completing an organization’s vulnerability report and wants it to reflect assets accurately. Which of the following items should be in the report?