CompTIA CS0-001 valid exam dumps : CompTIA Cybersecurity Analyst (CySA+) Certification Exam

The help desk informed a security analyst of a trend that is beginning to develop regarding a suspicious email that has been reported by multiple users. The analyst has determined the email includes an attachment named invoice.zip that contains the following files:
Locky.js
xerty.ini
xerty.lib
Further analysis indicates that when the .zip file is opened, it is installing a new version of ransomware on the devices. Which of the following should be done FIRST to prevent data on the company NAS from being encrypted by infected devices?

• A. Add the URL included in the .js file to the company's web proxy filter.
• B. Disable access to the company VPN.
• C. Set permissions on file shares to read-only.
• D. Move the files from the NAS to a cloud-based storage solution.

Several users have reported that when attempting to save documents in team folders, the following message is received:
The File Cannot Be Copied or Moved - Service Unavailable.
Upon further investigation, it is found that the syslog server is not obtaining log events from the file server to which the users are attempting to copy files. Which of the following is the MOST likely scenario causing these issues?

• A. All the available space on the file server is consumed
• B. The network is saturated, causing network congestion
• C. The file server is experiencing high CPU and memory utilization
• D. Malicious processes are running on the file server

A security analyst is concerned that employees may attempt to exfiltrate data prior to tendering their resignations. Unfortunately, the company cannot afford to purchase a data loss prevention (DLP) system. Which of the following recommendations should the security analyst make to provide defense-in-depth against data loss? (Select THREE).

• A. Prevent users from copying data from workstation to workstation
• B. Prevent users from being able to use the copy and paste functions
• C. Prevent flash drives from connecting to USB ports using Group Policy
• D. Prevent users from using roaming profiles when changing workstations
• E. Prevent Internet access on laptops unless connected to the network in the office or via VPN
• F. Prevent users from accessing personal email and file-sharing sites via web proxy

A penetration test for the Internal DNS service of a company is scheduled, and the security analyst uses the ccpdump udp port S3 -1 ech0 command to get a packet capture from the DNS server that will be used to confirm any findings During the daily report meeting the penetration tester reports a zone transfer vulnerability using the dig -axfr command against the server The analyst opens the packet capture from the day before, but there are no traces of the transfer. Which of the following is the MOST likely cause of this issue?

• A. The packet analyzer software does not support DNS protocol parsing
• B. The DNS zone transfers used a different port and were filtered out of the capture.
• C. The zone transfer used a different protocol
• D. Tcpdump does not support capturing DNS packets.
• E. The zone transfer happened before the packet capture started.
• F. A false positive was reported by the penetration tester.

Due to a security breach initiated from South America, the Chief Security Officer (CSO) instructed a team to design and implement an appropriate security control to prevent such an attack from reoccurring. The company has sales and consulting teams across the United States that need access to company resources. The security manager implemented a location-based authentication to prevent non-US-based access to the company networks. Three months later, the same incident reoccurred with an attack originating from a country in Asia. Which of the following security design defects could be the cause?

• A. The team did not account for the VPN access and did not ensure non-repudiation
• B. The company just replaced a firewall that had a DDoS vulnerability
• C. The sales and supports are reusing the same passwords for their personal accounts, such as banking and email
• D. The hackers left a backdoor within the company networks that was not cleaned successfully