A security analyst needs to automate the extraction of all IP addresses from a large log file that is exported from the SIEM. The analyst wants to count the frequency of each unique IP to identify the top source addresses. Which Python approach is most efficient for this task?

Use a regular expression to find all IP addresses, then store them in a dictionary and increment counts.

Read the file line by line and print every line that contains an IP address.

Use the `collections.Counter` on the raw file content without parsing.

Write a script that uses the `socket` library to resolve each IP to a hostname.

CompTIACySA+

Domain 1Objective 3

Tools and Techniques CS0-003 Practice Questions (Page 6)

Part of the Security operations domain, which accounts for 33% of the CS0-003 exam. CompTIA does not publish an official question count, but from its 165-minute exam (~65–110 total, ~21–36 in this domain), expect 4–7 from this objective — we provide 28 practice questions to prepare you well beyond it. (estimate)

28questions here

6free pages

7concepts

33%of the exam

Questions 26–28

26application · medium
A security analyst needs to automate the extraction of all IP addresses from a large log file that is exported from the SIEM. The analyst wants to count the frequency of each unique IP to identify the top source addresses. Which Python approach is most efficient for this task?
Select an answer first
27foundation · easy
A security analyst wants to check if a suspicious URL is associated with malware. Which VirusTotal feature should the analyst use?
Select an answer first
28foundation · easy
An analyst has received a suspicious file from an end user and wants to check if it is known malware. Which VirusTotal feature is most appropriate for this task?
Select an answer first

Finished these 3 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to CS0-003

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CompTIA. “CS0-003” is a trademark of its owner, used for identification only.

Tools and Techniques CS0-003 Practice Questions (Page 6)

Questions 26–28

A security analyst needs to automate the extraction of all IP addresses from a large log file that is exported from the SIEM. The analyst wants to count the frequency of each unique IP to identify the top source addresses. Which Python approach is most efficient for this task?

A security analyst wants to check if a suspicious URL is associated with malware. Which VirusTotal feature should the analyst use?

An analyst has received a suspicious file from an end user and wants to check if it is known malware. Which VirusTotal feature is most appropriate for this task?

Keep studying — Security operations