CS0-003 Exam Questions and Answers | Exam-Dumps (Page: 10)

QUESTION: 73

An employee accessed a website that caused a device to become infected with invasive malware. The incident response analyst has:
created the initial evidence log.
disabled the wireless adapter on the device.
interviewed the employee, who was unable to identify the website that was accessed. reviewed the web proxy traffic logs.
Which of the following should the analyst do to remediate the infected device?

Update the system firmware and reimage the hardware.
Install an additional malware scanner that will send email alerts to the analyst.
Configure the system to use a proxy server for Internet access.
Delete the user profile and restore data from backup.

Answer(s): A

Reveal Solution Next Question

QUESTION: 74

A cloud team received an alert that unauthorized resources were being auto-provisioned. After investigating, the team suspects that cryptomining is occurring.
Which of the following indicators would most likely lead the team to this conclusion?

High GPU utilization
Bandwidth consumption
Unauthorized changes
Unusual traffic spikes

Answer(s): A

Reveal Solution Next Question

QUESTION: 75

A company’s security team is updating a section of the reporting policy that pertains to inappropriate use of resources (e.g., an employee who installs cryptominers on workstations in the office). Besides the security team, which of the following groups should the issue be escalated to first in order to comply with industry best practices?

Help desk
Law enforcement
Legal department
Board member

Answer(s): C

Reveal Solution Next Question

QUESTION: 76

Given the following CVSS string:
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Which of the following attributes correctly describes this vulnerability?

A user is required to exploit this vulnerability.
The vulnerability is network based.
The vulnerability does not affect confidentiality.
The complexity to exploit the vulnerability is high.

Answer(s): B

Reveal Solution Next Question

QUESTION: 77

A cryptocurrency service company is primarily concerned with ensuring the accuracy of the data on one of its systems. A security analyst has been tasked with prioritizing vulnerabilities for remediation for the system. The analyst will use the following CVSSv3.1 impact metrics for prioritization:

Which of the following vulnerabilities should be prioritized for remediation?

1
2
3
4

Answer(s): D

Reveal Solution Next Question

QUESTION: 78

Patches for two highly exploited vulnerabilities were released on the same Friday afternoon. Information about the systems and vulnerabilities is shown in the tables below:

Which of the following should the security analyst prioritize for remediation?

rogers
brady
brees
manning

Answer(s): B

Reveal Solution Next Question

QUESTION: 79

A security analyst must preserve a system hard drive that was involved in a litigation request.
Which of the following is the best method to ensure the data on the device is not modified?

Generate a hash value and make a backup image.
Encrypt the device to ensure confidentiality of the data.
Protect the device with a complex password.
Perform a memory scan dump to collect residual data

Answer(s): A

Reveal Solution Next Question

QUESTION: 80

Which of the following best describes the goal of a tabletop exercise?

To test possible incident scenarios and how to react properly
To perform attack exercises to check response effectiveness
To understand existing threat actors and how to replicate their techniques
To check the effectiveness of the business continuity plan

Answer(s): A

Reveal Solution Next Question

CompTIA CS0-003 Exam (page: 10) CompTIA CySA+ (CS0-003) Updated on: 12-Jan-2026

QUESTION: 73

QUESTION: 74

QUESTION: 75

QUESTION: 76

QUESTION: 77

QUESTION: 78

QUESTION: 79

QUESTION: 80

CompTIA CS0-003 Exam (page: 10)
CompTIA CySA+ (CS0-003)
Updated on: 12-Jan-2026