CompTIA Cybersecurity Analyst (CySA+) Certification - CS0-004무료 덤프문제 풀어보기
A company migrated its email solution from hybrid to on premises only. The administrator made the following changes:
Hybrid, before the migration:
- v=spf1 include:cloud.mailprovider.com ip4:200.100.50.25/32 -all
On premises, after the migration:
- v=spf1 ip4:200.100.50.25/32 -all
A few weeks after the migration, multiple clients report that the company's emails are being marked as spam. The systems administrator notices that the SPF record has been manipulated by a threat actor who is spoofing the company's domain. The unauthorized change:
- v=spf1 include:cloud.mailprovider.com ip4:100.50.25.10 -all
Which of the following explains the reason legitimate emails are being marked as spam?
Hybrid, before the migration:
- v=spf1 include:cloud.mailprovider.com ip4:200.100.50.25/32 -all
On premises, after the migration:
- v=spf1 ip4:200.100.50.25/32 -all
A few weeks after the migration, multiple clients report that the company's emails are being marked as spam. The systems administrator notices that the SPF record has been manipulated by a threat actor who is spoofing the company's domain. The unauthorized change:
- v=spf1 include:cloud.mailprovider.com ip4:100.50.25.10 -all
Which of the following explains the reason legitimate emails are being marked as spam?
정답: A
설명: (Fast2test 회원만 볼 수 있음)
Which of the following occurs during the analysis phase of the incident response process?
정답: D
설명: (Fast2test 회원만 볼 수 있음)
A security architect reviews a report from a third-party incident response consultant and observes the following:
Which of the following frameworks did the consultant use to perform analysis?
Which of the following frameworks did the consultant use to perform analysis?
정답: B
설명: (Fast2test 회원만 볼 수 있음)
Users frequently get disconnected from the company's internal wireless network. The wireless system and clients are healthy. Once disconnected, the wireless clients reconnect automatically.
Which of the following is the best way for a security analyst to determine the source of the wireless disconnection?
Which of the following is the best way for a security analyst to determine the source of the wireless disconnection?
정답: D
설명: (Fast2test 회원만 볼 수 있음)
Despite removing malware from some of the affected hosts, several of an organization's internal resources are still unavailable two weeks after the discovery of a major incident. Which of the following best describes this phase?
정답: D
설명: (Fast2test 회원만 볼 수 있음)
A threat intelligence analyst needs to gather TTPs from attackers. Which of the following is the most comprehensive resource for this task?
정답: B
설명: (Fast2test 회원만 볼 수 있음)
A security analyst needs to identify the devices in a critical infrastructure network that handles an oil and gas pipeline. The network has devices connected over IPv4 using either HTTP or Modbus protocols running on the standard ports. Which of the following approaches should the analyst use to achieve the objective?
정답: D
설명: (Fast2test 회원만 볼 수 있음)
An analyst reviews the following log entries:
Which of the following conclusions should the analyst reach? (Choose two.)
Which of the following conclusions should the analyst reach? (Choose two.)
정답: D,E
설명: (Fast2test 회원만 볼 수 있음)