CS0-003 Exam Questions and Answers | Exam-Dumps (Page: 12)

QUESTION: 89

A SOC analyst identifies the following content while examining the output of a debugger command over a client-server application:
getConnection(database01,"alpha" ,"AxTv.127GdCx94GTd");
Which of the following is the most likely vulnerability in this system?

Lack of input validation
SQL injection
Hard-coded credential
Buffer overflow

Answer(s): C

Reveal Solution Next Question

QUESTION: 90

A technician is analyzing output from a popular network mapping tool for a PCI audit:

Which of the following best describes the output?

The host is not up or responding.
The host is running excessive cipher suites.
The host is allowing insecure cipher suites.
The Secure Shell port on this host is closed.

Answer(s): C

Reveal Solution Next Question

QUESTION: 91

A managed security service provider is having difficulty retaining talent due to an increasing workload caused by a client doubling the number of devices connected to the network.
Which of the following would best aid in decreasing the workload without increasing staff?

SIEM
XDR
SOAR
EDR

Answer(s): C

Reveal Solution Next Question

QUESTION: 92

An employee is suspected of misusing a company-issued laptop. The employee has been suspended pending an investigation by human resources.
Which of the following is the best step to preserve evidence?

Disable the user’s network account and access to web resources.
Make a copy of the files as a backup on the server.
Place a legal hold on the device and the user’s network share.
Make a forensic image of the device and create a SHA-1 hash.

Answer(s): D

Reveal Solution Next Question

QUESTION: 93

An analyst receives threat intelligence regarding potential attacks from an actor with seemingly unlimited time and resources.
Which of the following best describes the threat actor attributed to the malicious activity?

Insider threat
Ransomware group
Nation-state
Organized crime

Answer(s): C

Reveal Solution Next Question

QUESTION: 94

A systems analyst is limiting user access to system configuration keys and values in a Windows environment.
Which of the following describes where the analyst can find these configuration items?

config.ini
ntds.dit
Master boot record
Registry

Answer(s): D

Reveal Solution Next Question

QUESTION: 95

While reviewing web server logs, a security analyst found the following line:
<IMG SRC='vbscript:msgbox("test")'>
Which of the following malicious activities was attempted?

Command injection
XML injection
Server-side request forgery
Cross-site scripting

Answer(s): D

Reveal Solution Next Question

QUESTION: 96

A security analyst at a company called ACME Commercial notices there is outbound traffic to a host IP that resolves to https://office365password.acme.co. The site’s standard VPN logon page is www.acme.com/logon.
Which of the following is most likely true?

This is a normal password change URL.
The security operations center is performing a routine password audit.
A new VPN gateway has been deployed.
A social engineering attack is underway.

Answer(s): D

Reveal Solution Next Question

CompTIA CS0-003 Exam (page: 12) CompTIA CySA+ (CS0-003) Updated on: 12-Jan-2026

QUESTION: 89

QUESTION: 90

QUESTION: 91

QUESTION: 92

QUESTION: 93

QUESTION: 94

QUESTION: 95

QUESTION: 96

CompTIA CS0-003 Exam (page: 12)
CompTIA CySA+ (CS0-003)
Updated on: 12-Jan-2026