CompTIA CS0-003 Practice Test 58

Question 570

A C application uses a freed object when handling concurrent requests. What is the MOST appropriate analyst action based on the evidence?

Restore platform exploit mitigations while fixing the underlying memory bug.
Correct object lifetime and synchronization; test with memory sanitizers.
Add bounds-safe parsing and memory-safe alternatives where feasible.
Validate integer range and allocation size before copying data.

Explanation

Correct Answer

Use-after-free can corrupt heap state and potentially enable code execution. Remediate use-after-free memory bug.

Incorrect Answers

Address randomization raises exploit difficulty but is not a permanent code fix. That is relevant to buffer and integer overflow defenses, not to remediate use-after-free memory bug.

Unchecked copies can corrupt stack or heap memory. It could help prevent classic buffer overflow, but it would not remediate use-after-free memory bug.

Integer overflow can produce undersized memory buffers. That is relevant to buffer and integer overflow defenses, not to remediate use-after-free memory bug.

Question 571

An application uses SameSite=None on all session cookies without cross-site business need. Which next step is MOST defensible for the security team?

Use HttpOnly for authentication cookies and constrain third-party script execution.
Mark sensitive cookies Secure and eliminate HTTP exposure for authenticated sessions.
Apply an appropriate SameSite policy after testing legitimate integration flows.
Revoke or rotate affected sessions after security-sensitive credential changes.

Explanation

Correct Answer

SameSite restrictions reduce ambient credential use in cross-site requests. Tighten unnecessary cross-site cookie use.

Incorrect Answers

HttpOnly reduces credential theft through client-side script access. It would prevent script-accessible auth cookie theft, but it would not tighten unnecessary cross-site cookie use.

Secure cookies reduce transmission over unencrypted connections. It could help protect cookies over HTTPS, but it would not tighten unnecessary cross-site cookie use.

Password changes alone may not invalidate stolen session tokens. It would terminate stale sessions after password reset, but it would not tighten unnecessary cross-site cookie use.

Question 572

A high-privilege web session remains active after an administrator signs out. Which action BEST aligns with sound security operations?

Add adaptive throttling and account-risk monitoring without enabling denial of service by arbitrary lockouts.
Issue single-use short-lived reset tokens bound to the intended account.
Store tokens in platform-protected credential storage and rotate exposed secrets.
Invalidate server-side sessions and tokens upon logout as supported by architecture.

Explanation

Correct Answer

Removing browser UI does not necessarily revoke an existing session. Enforce session invalidation after logout.

Incorrect Answers

Controlled rate limits reduce automated guessing while retaining service availability. It could help mitigate authentication brute force responsibly, but it would not enforce session invalidation after logout.

Reusable reset links create persistent credential takeover opportunities. That is relevant to authentication and session vulnerabilities, not to enforce session invalidation after logout.

Tokens function as credentials and require confidentiality at rest. It would protect mobile bearer tokens, but it would not enforce session invalidation after logout.

Question 573

Remote administrator access relies solely on reusable passwords. Which response BEST addresses the security problem described?

Require phishing-resistant MFA and restricted privileged access channels.
Enable password blocklists and strong account compromise monitoring.
Replace hard-coded credentials with short-lived scoped identities and vaulted secrets.
Implement least-privilege RBAC and review sensitive resource authorization.

Explanation

Correct Answer

Strong second factors reduce impact of stolen primary credentials. Harden admin login against phishing.

Incorrect Answers

Known-compromised credentials increase password-stuffing success risk. It would block known breached passwords, but it would not harden admin login against phishing.

Ephemeral credentials reduce exposure and limit replay windows. It could help replace long-lived automation credentials, but it would not harden admin login against phishing.

Reducing default reach limits the impact of stolen credentials. That is relevant to protection against credential misuse, not to harden admin login against phishing.

Question 574

A multi-tenant report endpoint uses tenant ID from a client-controlled request header. Which investigative or response action BEST fits the evidence?

Scope token authorization to required actions and resources.
Derive tenant scope from trusted authenticated claims and enforce data isolation.
Check authorization at the server API on every protected operation.
Enforce server-side ownership checks for each object and action.

Explanation

Correct Answer

Client-supplied tenant selection enables cross-tenant data access. Prevent cross-tenant authorization bypass.

Incorrect Answers

Excess token permissions enable unauthorized modifications after token exposure. It would enforce API action-level authorization, but it would not prevent cross-tenant authorization bypass.

User interface visibility is not a security boundary. That is relevant to broken object-level authorization, not to prevent cross-tenant authorization bypass.

Authentication does not authorize access to arbitrary records. It would fix insecure direct object reference, but it would not prevent cross-tenant authorization bypass.

Question 575

A search endpoint inserts unsanitized user input directly into a SQL query. What is the MOST appropriate analyst action based on the evidence?

Use tested query parameterization and enforce secure data-access libraries.
Reduce the application database principal to least required table operations.
Replace string-concatenated SQL with parameterized prepared statements.
Fix the application query construction rather than relying only on signatures.

Explanation

Correct Answer

Parameter binding separates user data from executable query syntax. Remediate SQL injection query construction.

Incorrect Answers

Handwritten escaping can fail for alternate character sets and contexts. It could help replace fragile manual SQL escaping, but it would not remediate SQL injection query construction.

Least privilege constrains damage if application code is compromised. That is relevant to sql injection risk mitigation, not to remediate SQL injection query construction.

Edge filtering cannot guarantee coverage of all input encodings. It could help implement root cause SQL injection fix, but it would not remediate SQL injection query construction.

Question 576

A sanctioned SaaS app permits unrestricted downloads by any external guest link. Which next step is MOST defensible for the security team?

Apply endpoint DLP and egress controls based on classification and user authorization.
Require masked approved test datasets and restrict production export rights.
Extend classification-based controls to USB and local file transfer paths.
Restrict sharing to approved audiences and require appropriate expiration.

Explanation

Correct Answer

Least-privilege link access reduces uncontrolled confidential distribution. Harden SaaS guest sharing.

Incorrect Answers

File encryption does not make unauthorized outbound transfer acceptable. That is relevant to defending against data exfiltration, not to harden SaaS guest sharing.

Lower-trust development environments should not hold unnecessary sensitive records. It would stop production data leak to test, but it would not harden SaaS guest sharing.

Protecting one egress channel leaves alternate data movement routes. It could help close USB DLP coverage gap, but it would not harden SaaS guest sharing.

Question 577

A web app changes account email through GET requests embedded in links. Which action BEST aligns with sound security operations?

Move state changes to protected methods with CSRF defenses and confirmation.
Evaluate actual cross-origin credential behavior before asserting cookie-based CSRF risk.
Add unpredictable anti-CSRF tokens or equivalent trusted-origin validation for sensitive actions.
Validate cryptographic state binding and redirect URI constraints for the flow.

Explanation

Correct Answer

Read-style URLs should not cause sensitive side effects when embedded elsewhere. Avoid state-changing GET CSRF exposure.

Incorrect Answers

CSRF depends on whether a browser automatically supplies an exploitable credential. It could help assess CSRF applicability to bearer API, but it would not avoid state-changing GET CSRF exposure.

Request authenticity must not rely only on automatically attached cookies. That is relevant to cross-site request forgery, not to avoid state-changing GET CSRF exposure.

OAuth state guards against cross-site authorization response confusion. It would protect OAuth callback from cross-site manipulation, but it would not avoid state-changing GET CSRF exposure.

Question 578

A banking site accepts state-changing transfers solely from ambient session cookies. Which response BEST addresses the security problem described?

Validate cryptographic state binding and redirect URI constraints for the flow.
Add unpredictable anti-CSRF tokens or equivalent trusted-origin validation for sensitive actions.
Evaluate actual cross-origin credential behavior before asserting cookie-based CSRF risk.
Move state changes to protected methods with CSRF defenses and confirmation.

Explanation

Correct Answer

Request authenticity must not rely only on automatically attached cookies. Protect transfer action from CSRF.

Incorrect Answers

OAuth state guards against cross-site authorization response confusion. It could help protect OAuth callback from cross-site manipulation, but it would not protect transfer action from CSRF.

CSRF depends on whether a browser automatically supplies an exploitable credential. It would assess CSRF applicability to bearer API, but it would not protect transfer action from CSRF.

Read-style URLs should not cause sensitive side effects when embedded elsewhere. It could help avoid state-changing GET CSRF exposure, but it would not protect transfer action from CSRF.

Question 579

A developer proposes escaping quote characters manually in every database request. Which investigative or response action BEST fits the evidence?

Replace string-concatenated SQL with parameterized prepared statements.
Reduce the application database principal to least required table operations.
Use tested query parameterization and enforce secure data-access libraries.
Fix the application query construction rather than relying only on signatures.

Explanation

Correct Answer

Handwritten escaping can fail for alternate character sets and contexts. Replace fragile manual SQL escaping.

Incorrect Answers

Parameter binding separates user data from executable query syntax. That is relevant to sql injection risk mitigation, not to replace fragile manual SQL escaping.

Least privilege constrains damage if application code is compromised. It would limit database blast radius after injection, but it would not replace fragile manual SQL escaping.

Edge filtering cannot guarantee coverage of all input encodings. That is relevant to sql injection risk mitigation, not to replace fragile manual SQL escaping.

Question 580

A mobile app stores long-lived bearer tokens in an unprotected shared directory. What is the MOST appropriate analyst action based on the evidence?

Add adaptive throttling and account-risk monitoring without enabling denial of service by arbitrary lockouts.
Invalidate server-side sessions and tokens upon logout as supported by architecture.
Issue single-use short-lived reset tokens bound to the intended account.
Store tokens in platform-protected credential storage and rotate exposed secrets.

Explanation

Correct Answer

Tokens function as credentials and require confidentiality at rest. Protect mobile bearer tokens.

Incorrect Answers

Controlled rate limits reduce automated guessing while retaining service availability. It would mitigate authentication brute force responsibly, but it would not protect mobile bearer tokens.

Removing browser UI does not necessarily revoke an existing session. It could help enforce session invalidation after logout, but it would not protect mobile bearer tokens.

Reusable reset links create persistent credential takeover opportunities. That is relevant to authentication and session vulnerabilities, not to protect mobile bearer tokens.

CompTIA CySA+ (CS0-003) (CS0-003) Practice Tests

CompTIA CS0-003 Practice Test 56 - 10 Questions (Last Reviewed 20-Sep-2026)
CompTIA CS0-003 Practice Test 57 - 10 Questions (Last Reviewed 15-Nov-2026)
CompTIA CS0-003 Practice Test 58 - 10 Questions (Last Reviewed 14-Nov-2026)
CompTIA CS0-003 Practice Test 59 - 10 Questions (Last Reviewed 13-Nov-2026)
CompTIA CS0-003 Practice Test 60 - 10 Questions (Last Reviewed 12-Nov-2026)

Pass Your CompTIA CS0-003 Exam Easy!

Question 570

Explanation

Correct Answer

Incorrect Answers

Question 571

Explanation

Correct Answer

Incorrect Answers

Question 572

Explanation

Correct Answer

Incorrect Answers

Question 573

Explanation

Correct Answer

Incorrect Answers

Question 574

Explanation

Correct Answer

Incorrect Answers

Question 575

Explanation

Correct Answer

Incorrect Answers

Question 576

Explanation

Correct Answer

Incorrect Answers

Question 577

Explanation

Correct Answer

Incorrect Answers

Question 578

Explanation

Correct Answer

Incorrect Answers

Question 579

Explanation

Correct Answer

Incorrect Answers

Question 580

Explanation

Correct Answer

Incorrect Answers

CompTIA CySA+ (CS0-003) (CS0-003) Practice Tests