Assessment Tool Output CS0-003 Practice Questions (Page 1)

Questions 1–5

1. 1application · medium

   A cloud security tool reports that an Azure VM has 'Just-in-Time (JIT) access' disabled for RDP. The VM is a domain controller that is only accessed by a few administrators. What is the primary security benefit of enabling JIT access?

   • AIt encrypts all RDP traffic to the VM.
   • BIt provides multi-factor authentication for RDP sessions.
   • CIt automatically patches the VM for vulnerabilities.
   • DIt reduces the attack surface by limiting the time RDP is exposed to the internet.
   Reveal Solution Discussion Select an answer first
2. 2expert · hard

   An analyst is reviewing the results of an internal network scan. The scan shows that a database server has port 1433/tcp open, which is used by Microsoft SQL Server. The server is also running a web application that is accessible on port 443. The analyst discovers that the SQL Server service is using a 'sa' account with a weak password. What is the most significant risk?

   • AAn attacker could exploit the weak 'sa' password to gain full control of the database.
   • BThe web application could be vulnerable to SQL injection.
   • CThe database server is not patched.
   • DThe database server is exposed to the internet.
   Reveal Solution Discussion Select an answer first
4. 3expert · hard

   A developer is analyzing a crash dump from a production application. The debugger shows a buffer overflow in a function that processes network packets. The overflow overwrites a return address on the stack. What is the most likely security impact if this vulnerability is exploited?

   • AAn attacker could execute arbitrary code with the privileges of the application.
   • BThe application will log the error and continue running.
   • CAn attacker could read sensitive data from memory.
   • DThe application will crash, causing a denial of service.
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   A vulnerability scanner output lists a finding with a CVSS v3.1 base score of 9.8. How should an analyst prioritize this finding?

   • AHigh priority, as the score indicates a critical severity vulnerability
   • BMedium priority, as the score indicates a moderate severity vulnerability
   • CLow priority, as the score indicates a low severity vulnerability
   • DNo priority, as the score indicates an informational finding
   Reveal Solution Discussion Select an answer first
6. 5expert · hard

   A cloud security assessment tool reports that an AWS IAM role has a policy that grants 's3:PutObject' permission to all S3 buckets in the account. The role is used by an EC2 instance that runs a web application. What is the most significant risk associated with this configuration?

   • AThe IAM role is not using multi-factor authentication.
   • BThe S3 buckets are not encrypted.
   • CThe EC2 instance is exposed to the internet.
   • DIf the web application is compromised, an attacker could overwrite or delete objects in any S3 bucket.
   Reveal Solution Discussion Select an answer first