Assessment Tool Output CS0-003 Practice Questions (Page 3)

Questions 11–15

1. 11application · medium

   A vulnerability scanner report for a company's internal network lists the following findings: (1) A critical remote code execution vulnerability on a legacy file server, (2) a high-severity missing security patch on a developer workstation, and (3) a medium-severity weak TLS configuration on the internal web portal. The file server is scheduled for decommissioning in two weeks. What should the analyst do first?

   • ADecommission the file server immediately, even though it is still needed for two weeks.
   • BIsolate the legacy file server from the network to mitigate the critical risk until it is decommissioned.
   • CApply the missing security patch to the developer workstation immediately.
   • DUpdate the TLS configuration on the web portal to address the medium-severity issue.
   Reveal Solution Discussion Select an answer first
2. 12application · medium

   A developer is debugging a web application and uses a debugger to step through the code. The debugger shows a variable containing user input being concatenated directly into a SQL query string. What type of vulnerability is the developer most likely introducing?

   • ACross-Site Scripting (XSS)
   • BCommand Injection
   • CBuffer Overflow
   • DSQL Injection
   Reveal Solution Discussion Select an answer first
4. 13application · easy

   An analyst runs a network scan and sees that a host has port 445/tcp open. The analyst also notices that the host is a member of the domain and is running Windows 10. What is the most likely service running on this port?

   • ASMB (Server Message Block) for file and printer sharing.
   • BHTTP for web services.
   • CSSH for secure remote administration.
   • DRDP for remote desktop connections.
   Reveal Solution Discussion Select an answer first
5. 14foundation · easy

   Which multipurpose tool is commonly used to capture and analyze network traffic for security assessment?

   • AMetasploit
   • BNmap
   • CBurp Suite
   • DWireshark
   Reveal Solution Discussion Select an answer first
6. 15application · medium

   A security analyst runs Nmap against a critical web server and receives the following output: '22/tcp open ssh', '80/tcp open http', '443/tcp open https', '3306/tcp open mysql'. The server is a public-facing e-commerce application. Which finding should the analyst prioritize for immediate remediation?

   • APort 22 is open, allowing potential brute-force SSH attacks from the internet.
   • BPort 443 is open, which is expected for HTTPS but could be vulnerable to SSL/TLS misconfigurations.
   • CPort 3306 is exposed to the internet, allowing direct database access attempts.
   • DPort 80 is open, allowing unencrypted HTTP traffic to be intercepted.
   Reveal Solution Discussion Select an answer first