CS0-003 Exam Dumps | The DevSecOps team is remediating a Server-Side Request Forgery (SSRF) issue on the company ' s public-

<< Prev Question Next Question >>

Question 65/214

The DevSecOps team is remediating a Server-Side Request Forgery (SSRF) issue on the company ' s public- facing website. Which of the following is the best mitigation technique to address this issue?

A. Place a Web Application Firewall (WAF) in front of the web server.

B. Install a Cloud Access Security Broker (CASB) in front of the web server.

C. Put a forward proxy in front of the web server.

D. Implement MFA in front of the web server.

Question List (214q): Question 1: Which of the following best describes a good patching and vu...; Question 2: The vulnerability analyst reviews threat intelligence regard...; Question 3: Which of the following best explains the importance of playb...; Question 4: A systems administrator receives several reports about email...; Question 5: An organization enabled a SIEM rule to send an alert to a se...; Question 6: A cybersecurity analyst notices unusual network scanning act...; Question 7: A company discovers that its proprietary information is bein...; Question 8: A systems administrator is reviewing after-hours traffic flo...; Question 9: An analyst is reviewing a vulnerability report for a server ...; Question 10: A SIEM alert is triggered based on execution of a suspicious...; Question 11: During a security incident, security tools quarantine a devi...; Question 12: A security analyst needs to prioritize vulnerabilities for p...; Question 13: A security analyst receives an alert for suspicious activity...; Question 14: A security analyst is reviewing the logs of a web server and...; Question 15: A third-party assessment of a recent incident determined tha...; Question 16: During a routine review, a security analyst identifies an un...; Question 17: The security team is reviewing a list of vulnerabilities pre...; Question 18: A security analyst provides the management team with an afte...; Question 19: The Chief Information Security Officer wants the same level ...; Question 20: An incident response analyst is taking over an investigation...; Question 21: A web developer reports the following error that appeared on...; Question 22: The analyst reviews the following endpoint log entry: (Exhib...; Question 23: A company classifies security groups by risk level. Any grou...; Question 24: A security analyst is tasked with prioritizing vulnerabiliti...; Question 25: A vulnerability analyst is writing a report documenting the ...; Question 26: Following an incident, a security analyst needs to create a ...; Question 27: A security analyst needs to identify an asset that should be...; Question 28: A security analyst has found the following suspicious DNS tr...; Question 29: Each time a vulnerability assessment team shares the regular...; Question 30: An incident response team found indicators of compromise on ...; Question 31: After a security assessment was done by a third-party consul...; Question 32: An analyst is trying to capture anomalous traffic from a com...; Question 33: Which of the following should be updated after a lessons-lea...; Question 34: A security analyst found the following vulnerability on the ...; Question 35: A security analyst observed the following activity from a pr...; Question 36: Which of the following is a useful tool for mapping, trackin...; Question 37: A malicious actor has gained access to an internal network b...; Question 38: A systems administrator is reviewing the output of a vulnera...; Question 39: A security analyst is reviewing events that occurred during ...; Question 40: While reviewing the web server logs a security analyst notic...; Question 41: Which of the following makes STIX and OpenloC information re...; Question 42: A security analyst is improving an organization ' s vulnerab...; Question 43: Exploit code for a recently disclosed critical software vuln...; Question 44: The Chief Executive Officer (CEO) has notified that a confid...; Question 45: A company needs to design controls to address the following ...; Question 46: An organization receives a legal hold request from an attorn...; Question 47: After updating the email client to the latest patch, only ab...; Question 48: An analyst needs to provide recommendations based on a recen...; Question 49: An organization has implemented code into a production envir...; Question 50: A security analyst is validating a particular finding that w...; Question 51: An analyst is conducting routine vulnerability assessments o...; Question 52: A cybersecurity analyst is reviewing SIEM logs and observes ...; Question 53: An analyst discovers unusual outbound connections to an IP t...; Question 54: Executives at an organization email sensitive financial info...; Question 55: Which of the following is the appropriate phase in the incid...; Question 56: An analyst is reviewing a dashboard from the company's SIEM ...; Question 57: Which of the following entities should an incident manager w...; Question 58: A security analyst reviews the following Arachni scan result...; Question 59: Several reports with sensitive information are being disclos...; Question 60: A company discovers that its proprietary information is bein...; Question 61: Which of the following is the most appropriate action a secu...; Question 62: A security analyst is identifying vulnerabilities in laptops...; Question 63: An analyst produces a weekly endpoint status report for the ...; Question 64: A vulnerability manager analyzes suspicious data after scann...; Question 65: The DevSecOps team is remediating a Server-Side Request Forg...; Question 66: A security analyst is responding to an indent that involves ...; Question 67: Which of the following is often used to keep the number of a...; Question 68: A security team identified several rogue Wi-Fi access points...; Question 69: A company receives a penetration test report summary from a ...; Question 70: An analyst suspects cleartext passwords are being sent over ...; Question 71: Which of the following is the best authentication method to ...; Question 72: A security analyst performs forensic analysis of a user's co...; Question 73: A cybersecurity analyst has been assigned to the threat-hunt...; Question 74: A SOC team lead occasionally collects some DNS information f...; Question 75: A company is in the process of implementing a vulnerability ...; Question 76: Which of the following is the best metric for an organizatio...; Question 77: An attacker has just gained access to the syslog server on a...; Question 78: A team of analysts is developing a new internal system that ...; Question 79: A SOC analyst identifies the following content while examini...; Question 80: Which of the following explains how MTTD can affect incident...; Question 81: A security analyst recently used Arachni to perform a vulner...; Question 82: An organization ' s email account was compromised by a bad a...; Question 83: Which of the following describes the best reason for conduct...; Question 84: A threat intelligence analyst is updating a document accordi...; Question 85: A security analyst is responding to an incident that involve...; Question 86: Which of the following characteristics ensures the security ...; Question 87: A security analyst is responding to an indent that involves ...; Question 88: A Chief Information Security Officer wants to implement secu...; Question 89: An analyst notices there is an internal device sending HTTPS...; Question 90: An analyst is examining events in multiple systems but is ha...; Question 91: The Chief Executive Officer of an organization recently hear...; Question 92: A security analyst performs a vulnerability scan. Based on t...; Question 93: A cybersecurity team quarantines a virtual machine (VM) that...; Question 94: An XSS vulnerability was reported on one of the public websi...; Question 95: Which of the following is a benefit of the Diamond Model of ...; Question 96: A security analyst is assisting a software engineer with the...; Question 97: During a tabletop exercise, engineers discovered that an ICS...; Question 98: A security analyst is trying to identify possible network ad...; Question 99: An analyst reviews the following list of vulnerabilities: CV...; Question 100: A Chief Information Security Officer wants to lock down the ...; Question 101: A healthcare organization must develop an action plan based ...; Question 102: An incident response analyst is taking over an investigation...; Question 103: %77%77%77%2e%69%63%65%2d%70%74%69%63%2e%63%6f%6d Which of th...; Question 104: An organization needs to respond to an ongoing attack involv...; Question 105: Which of the following is a circumstance in which a security...; Question 106: A security analyst at a company called ACME Commercial notic...; Question 107: Patches for two highly exploited vulnerabilities were releas...; Question 108: Which of the following best explains the importance of the i...; Question 109: A company patches its servers using automation software. Rem...; Question 110: An analyst reviews the following web server log entries: %2E...; Question 111: A technician identifies a vulnerability on a server and appl...; Question 112: A security analyst identifies a device on which different ma...; Question 113: A security analyst has identified outgoing network traffic l...; Question 114: An analyst recommends that an EDR agent collect the source I...; Question 115: During an internal code review, software called " ACE " was ...; Question 116: A security analyst is working on a server patch management p...; Question 117: An analyst wants to ensure that users only leverage web-base...; Question 118: Which of the following best describes the key goal of the co...; Question 119: A small company does no! have enough staff to effectively se...; Question 120: A penetration tester submitted data to a form in a web appli...; Question 121: A recent vulnerability scan resulted in an abnormally large ...; Question 122: A security analyst performs a vulnerability scan. Given the ...; Question 123: After identifying a threat, a company has decided to impleme...; Question 124: While a security analyst for an organization was reviewing l...; Question 125: A vulnerability scan of a web server that is exposed to the ...; Question 126: An analyst wants to track how quickly vulnerabilities are id...; Question 127: An analyst is reviewing processes running on a Windows host....; Question 128: A recent penetration test discovered that several employees ...; Question 129: An analyst is suddenly unable to enrich data from the firewa...; Question 130: Which of the following is the best way to begin preparation ...; Question 131: Which of the following is the best way to provide realistic ...; Question 132: A SOC analyst determined that a significant number of the re...; Question 133: A cybersecurity analyst is recommending a solution to ensure...; Question 134: Which of the following best describes the importance of impl...; Question 135: A company is concerned with finding sensitive file storage l...; Question 136: ID Source Destination Protocol Service 1 172.16.1.1 172.16.1...; Question 137: A SOC manager is establishing a reporting process to manage ...; Question 138: A security analyst recently joined the team and is trying to...; Question 139: Which of the following items should be included in a vulnera...; Question 140: An organization enabled a SIEM rule to send an alert to a se...; Question 141: During normal security monitoring activities, the following ...; Question 142: An analyst finds that an IP address outside of the company n...; Question 143: Security analysts review logs on multiple servers on a daily...; Question 144: The architecture team has been given a mandate to reduce the...; Question 145: During an incident, a security analyst discovers a large amo...; Question 146: Which of the following best describes the importance of KPIs...; Question 147: The security team reviews a web server for XSS and runs the ...; Question 148: An organization has tracked several incidents that are liste...; Question 149: A security analyst is reviewing the following alert that was...; Question 150: A company ' s security team is updating a section of the rep...; Question 151: A security analyst is trying to detect connections to a susp...; Question 152: A company has a primary control in place to restrict access ...; Question 153: An analyst reviews the following list of vulnerabilities: CV...; Question 154: Which of the following attributes is part of the Diamond Mod...; Question 155: During the log analysis phase, the following suspicious comm...; Question 156: A company notices an increase in successful social engineeri...; Question 157: Which of the following best explains the importance of commu...; Question 158: During a cybersecurity incident, one of the web servers at t...; Question 159: Which of the following threat-modeling procedures is in the ...; Question 160: Several users received a phishing email containing a malicio...; Question 161: A Chief Information Security Officer wants to map all the at...; Question 162: A security analyst is trying to identify anomalies on the ne...; Question 163: A software developer has been deploying web applications wit...; Question 164: A recent zero-day vulnerability is being actively exploited,...; Question 165: An incident response analyst is investigating the root cause...; Question 166: After a risk assessment, a server was found hosting a vulner...; Question 167: A security program was able to achieve a 30% improvement in ...; Question 168: Based on an internal assessment, a vulnerability management ...; Question 169: An analyst receives an alert for suspicious IIS log activity...; Question 170: A regulated organization experienced a security breach that ...; Question 171: You are a cybersecurity analyst tasked with interpreting sca...; Question 172: The SOC receives a number of complaints regarding a recent u...; Question 173: A cybersecurity analyst is participating with the DLP projec...; Question 174: The Chief Information Security Officer is directing a new pr...; Question 175: A systems analyst is limiting user access to system configur...; Question 176: Due to an incident involving company devices, an incident re...; Question 177: Two employees in the finance department installed a freeware...; Question 178: An analyst is imaging a hard drive that was obtained from th...; Question 179: An analyst wants to detect outdated software packages on a s...; Question 180: Joe, a leading sales person at an organization, has announce...; Question 181: Which of the following is the most important factor to ensur...; Question 182: A systems administrator is reviewing after-hours traffic flo...; Question 183: Given the following CVSS string- CVSS:3.0/AV:N/AC:L/PR:N/UI:...; Question 184: A security analyst has identified a new malware file that ha...; Question 185: Which of the following would a security analyst most likely ...; Question 186: Following a recent security incident, the Chief Information ...; Question 187: A security analyst needs to develop a solution to protect a ...; Question 188: Which of the following is a reason why proper handling and r...; Question 189: Which of the following tools provides logs that show user ac...; Question 190: During an incident, an analyst needs to acquire evidence for...; Question 191: Which of the following is a KPI that is used to monitor or r...; Question 192: A security analyst needs to ensure that systems across the o...; Question 193: A vulnerability management team is unable to patch all vulne...; Question 194: Which of the following is the best framework for assessing h...; Question 195: A disgruntled open-source developer has decided to sabotage ...; Question 196: A security analyst identified the following suspicious entry...; Question 197: A cybersecurity analyst is tasked with scanning a web applic...; Question 198: A security operations center receives the following alerts r...; Question 199: An organization would like to ensure its cloud infrastructur...; Question 200: A security analyst detected the following suspicious activit...; Question 201: A security analyst reviews a packet capture and identifies t...; Question 202: Which Of the following techniques would be best to provide t...; Question 203: Which of the following security operations tasks are ideal f...; Question 204: An email with payment card information and personal data was...; Question 205: During an incident involving phishing, a security analyst ne...; Question 206: A Chief Information Security Officer has outlined several re...; Question 207: Which of the following best describes the document that defi...; Question 208: An email hosting provider added a new data center with new p...; Question 209: A SOC analyst observes reconnaissance activity from an IP ad...; Question 210: A SOC implements a single pane of glass approach to unify vi...; Question 211: An analyst is investigating a phishing incident and has retr...; Question 212: Which of the following would an organization use to develop ...; Question 213: A security analyst is developing a script to filter firewall...; Question 214: An incident response team is working with law enforcement to...

Question 65/214

LEAVE A REPLY

Download PDF File