A debugger output shows a segmentation fault at a specific memory address. What does this typically indicate?

The program has a syntax error in its source code

The program completed successfully

The program is running out of disk space

The program attempted to access memory it is not allowed to access

A cloud security assessment tool reports that an S3 bucket has 'public read access'. What does this indicate?

Anyone on the internet can read objects in the bucket

The bucket is accessible only from a specific IP range

The bucket is encrypted with a public key

Only authenticated users within the organization can read the bucket

A cloud security assessment tool reports that an S3 bucket in AWS is configured with 'public-read' access. The bucket contains customer-uploaded documents. What is the most immediate risk associated with this finding?

The bucket's encryption is not enabled.

The bucket is vulnerable to a denial-of-service attack.

The bucket is not using versioning.

Unauthorized users can read or download the contents of the bucket.

A vulnerability scanner reports a 'Critical' vulnerability on a web server with a CVSS score of 9.8. The server is behind a firewall that only allows HTTP and HTTPS traffic. The vulnerability is a remote code execution in a web application module. What should the analyst do first?

Block all traffic to the server to mitigate the risk.

Apply the vendor's patch immediately.

Verify the vulnerability manually to confirm it is not a false positive.

Ignore the finding because the server is behind a firewall.

CompTIACySA+

Domain 2Objective 2

Assessment Tool Output CS0-003 Practice Questions (Page 5)

Part of the Vulnerability management domain, which accounts for 30% of the CS0-003 exam. CompTIA does not publish an official question count, but from its 165-minute exam (~65–110 total, ~20–33 in this domain), expect 4–7 from this objective — we provide 28 practice questions to prepare you well beyond it. (estimate)

28questions here

6free pages

6concepts

30%of the exam

Questions 21–25

21foundation · easy
A debugger output shows a segmentation fault at a specific memory address. What does this typically indicate?
Select an answer first
22foundation · easy
A cloud security assessment tool reports that an S3 bucket has 'public read access'. What does this indicate?
Select an answer first
23application · medium
A cloud security assessment tool reports that an S3 bucket in AWS is configured with 'public-read' access. The bucket contains customer-uploaded documents. What is the most immediate risk associated with this finding?
Select an answer first
24foundation · easy
A security analyst needs to perform a port scan to identify open ports on a target system. Which multipurpose tool is best suited for this task?
Select an answer first
25application · medium
A vulnerability scanner reports a 'Critical' vulnerability on a web server with a CVSS score of 9.8. The server is behind a firewall that only allows HTTP and HTTPS traffic. The vulnerability is a remote code execution in a web application module. What should the analyst do first?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CS0-003

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CompTIA. “CS0-003” is a trademark of its owner, used for identification only.