CS0-003 Exam Questions and Answers | Exam-Dumps (Page: 2)

QUESTION: 9

Which of the following will most likely ensure that mission-critical services are available in the event of an incident?

Business continuity plan
Vulnerability management plan
Disaster recovery plan
Asset management plan

Answer(s): A

Reveal Solution Next Question

The Chief Information Security Officer wants to eliminate and reduce shadow IT in the enterprise. Several high- risk cloud applications are used that increase the risk to the organization.
Which of the following solutions will assist in reducing the risk?

Deploy a CASB and enable policy enforcement
Configure MFA with strict access
Deploy an API gateway
Enable SSO to the cloud applications

Answer(s): A

Reveal Solution Next Question

QUESTION: 11

An incident response team receives an alert to start an investigation of an internet outage. The outage is preventing all users in multiple locations from accessing external SaaS resources. The team determines the organization was impacted by a DDoS attack.
Which of the following logs should the team review first?

CDN
Vulnerability scanner
DNS
Web server

Answer(s): C

Reveal Solution Next Question

QUESTION: 12

A malicious actor has gained access to an internal network by means of social engineering. The actor does not want to lose access in order to continue the attack.
Which of the following best describes the current stage of the Cyber Kill Chain that the threat actor is currently operating in?

Weaponization
Reconnaissance
Delivery
Exploitation

Answer(s): D

Reveal Solution Next Question

QUESTION: 13

An analyst finds that an IP address outside of the company network that is being used to run network and vulnerability scans across external-facing assets.
Which of the following steps of an attack framework is the analyst witnessing?

Exploitation
Reconnaissance
Command and control
Actions on objectives

Answer(s): B

Reveal Solution Next Question

QUESTION: 14

An incident response analyst notices multiple emails traversing the network that target only the administrators of the company. The email contains a concealed URL that leads to an unknown website in another country.
Which of the following best describes what is happening? (Choose two.)

Beaconing
Domain Name System hijacking
Social engineering attack
On-path attack
Obfuscated links
Address Resolution Protocol poisoning

Answer(s): C,E

Reveal Solution Next Question

QUESTION: 15

During security scanning, a security analyst regularly finds the same vulnerabilities in a critical application.
Which of the following recommendations would best mitigate this problem if applied along the SDLC phase?

Conduct regular red team exercises over the application in production
Ensure that all implemented coding libraries are regularly checked
Use application security scanning as part of the pipeline for the CI/CD flow
Implement proper input validation for any data entry form

Answer(s): C

Reveal Solution Next Question

QUESTION: 16

An analyst is reviewing a vulnerability report and must make recommendations to the executive team. The analyst finds that most systems can be upgraded with a reboot resulting in a single downtime window.
However, two of the critical systems cannot be upgraded due to a vendor appliance that the company does not have access to.
Which of the following inhibitors to remediation do these systems and associated vulnerabilities best represent?

Proprietary systems
Legacy systems
Unsupported operating systems
Lack of maintenance windows

Answer(s): A

Reveal Solution Next Question

CompTIA CS0-003 Exam (page: 2)
CompTIA CySA+ (CS0-003)
Updated on: 28-Nov-2025

QUESTION: 9

QUESTION: 10

QUESTION: 11

QUESTION: 12

QUESTION: 13

QUESTION: 14

QUESTION: 15

QUESTION: 16

CompTIA CS0-003 Exam (page: 2) CompTIA CySA+ (CS0-003) Updated on: 28-Nov-2025

QUESTION: 9

QUESTION: 10

QUESTION: 11

QUESTION: 12

QUESTION: 13

QUESTION: 14

QUESTION: 15

QUESTION: 16

CompTIA CS0-003 Exam (page: 2)
CompTIA CySA+ (CS0-003)
Updated on: 28-Nov-2025