CS0-003 Exam Questions and Answers | Exam-Dumps (Page: 8)

QUESTION: 57

New employees in an organization have been consistently plugging in personal webcams despite the company policy prohibiting use of personal devices. The SOC manager discovers that new employees are not aware of the company policy.
Which of the following will the SOC manager most likely recommend to help ensure new employees are accountable for following the company policy?

Human resources must email a copy of a user agreement to all new employees
Supervisors must get verbal confirmation from new employees indicating they have read the user agreement
All new employees must take a test about the company security policy during the onboardmg process
All new employees must sign a user agreement to acknowledge the company security policy

Answer(s): D

Reveal Solution Next Question

QUESTION: 58

An analyst has been asked to validate the potential risk of a new ransomware campaign that the Chief Financial Officer read about in the newspaper. The company is a manufacturer of a very small spring used in the newest fighter jet and is a critical piece of the supply chain for this aircraft.
Which of the following would be the best threat intelligence source to learn about this new campaign?

Information sharing organization
Blogs/forums
Cybersecurity incident response team
Deep/dark web

Answer(s): A

Reveal Solution Next Question

QUESTION: 59

An incident response team finished responding to a significant security incident. The management team has asked the lead analyst to provide an after-action report that includes lessons learned.
Which of the following is the most likely reason to include lessons learned?

To satisfy regulatory requirements for incident reporting
To hold other departments accountable
To identify areas of improvement in the incident response process
To highlight the notable practices of the organization's incident response team

Answer(s): C

Reveal Solution Next Question

QUESTION: 60

A vulnerability management team is unable to patch all vulnerabilities found during their weekly scans. Using the third-party scoring system described below, the team patches the most urgent vulnerabilities:

Additionally, the vulnerability management team feels that the metrics Smear and Channing are less important than the others, so these will be lower in priority.
Which of the following vulnerabilities should be patched first, given the above third-party scoring system?

InLoud:
-Cobain: Yes
-Grohl: No
-Novo: Yes
-Smear: Yes
-Channing: No
TSpirit:
-Cobain: Yes
-Grohl: Yes
-Novo: Yes
-Smear: No
-Channing: No
ENameless:
-Cobain: Yes
-Grohl: No
-Novo: Yes
-Smear: No
-Channing: No
PBleach:
-Cobain: Yes
-Grohl: No
-Novo: No
-Smear: No
-Channing: Yes
-

Answer(s): B

Reveal Solution Next Question

QUESTION: 61

A user downloads software that contains malware onto a computer that eventually infects numerous other systems.
Which of the following has the user become?

Hacktivist
Advanced persistent threat
Insider threat
Script kiddie

Answer(s): C

Reveal Solution Next Question

QUESTION: 62

An organization has activated the CSIRT. A security analyst believes a single virtual server was compromised and immediately isolated from the network.
Which of the following should the CSIRT conduct next?

Take a snapshot of the compromised server and verify its integrity
Restore the affected server to remove any malware
Contact the appropriate government agency to investigate
Research the malware strain to perform attribution

Answer(s): A

Reveal Solution Next Question

QUESTION: 63

During an incident, an analyst needs to acquire evidence for later investigation.
Which of the following must be collected first in a computer system, related to its volatility level?

Disk contents
Backup data
Temporary files
Running processes

Answer(s): D

Reveal Solution Next Question

QUESTION: 64

A security analyst is trying to identify possible network addresses from different source networks belonging to the same company and region.
Which of the following shell script functions could help achieve the goal?

function w() { a=$(ping -c 1 $1 | awk-F ”/” ’END{print $1}’) && echo “$1 | $a” }
function x() { b=traceroute -m 40 $1 | awk ’END{print $1}’) && echo “$1 | $b” }
function y() { dig $(dig -x $1 | grep PTR | tail -n 1 | awk -F ”.in-addr” ’{print $1}’).origin.asn.cymru.com TXT +short }
function z() { c=$(geoiplookup$1) && echo “$1 | $c” }

Answer(s): C

Reveal Solution Next Question

CompTIA CS0-003 Exam (page: 8) CompTIA CySA+ (CS0-003) Updated on: 12-Jan-2026

QUESTION: 57

QUESTION: 58

QUESTION: 59

QUESTION: 60

QUESTION: 61

QUESTION: 62

QUESTION: 63

QUESTION: 64

CompTIA CS0-003 Exam (page: 8)
CompTIA CySA+ (CS0-003)
Updated on: 12-Jan-2026