Pearson CS0-001 New Attempt

Page: 2 / 16

Question 8

A company has decided to process credit card transactions directly. Which of the following would meet the requirements for scanning this type of data?

Options:

Quarterly

Yearly

Bi-annually

Monthly

Question 9

During the forensic phase of a security investigation, it was discovered that an attacker was able to find private keys on a poorly secured team shared drive. The attacker used those keys to intercept and decrypt sensitive traffic on a web server. Which of the following describes this type of exploit and the potential remediation?

Options:

Session hijacking; network intrusion detection sensors

Cross-site scripting; increased encryption key sizes

Man-in-the-middle; well-controlled storage of private keys

Rootkit; controlled storage of public keys

Question 10

A security analyst begins to notice the CPU utilization from a sinkhole has begun to spike. Which of the following describes what may be occurring?

Options:

Someone has logged on to the sinkhole and is using the device.

The sinkhole has begun blocking suspect or malicious traffic.

The sinkhole has begun rerouting unauthorized traffic.

Something is controlling the sinkhole and causing CPU spikes due to malicious utilization.

Question 11

An organization is experiencing degradation of critical services and availability of critical external resources. Which of the following can be used to investigate the issue?