Question 231 · 527 in bank
Which of the following is the best reason to implement an MOU?
Show answer
Answer: B
CompTIA Cybersecurity Analyst (CySA+)527 questions across 53 pages are complete and free, with no account or card.
527 questions in this bank
Free access · progress saved on this device
Which of the following is the best reason to implement an MOU?
Answer: B
Which of the following documents sets requirements and metrics for a third-party response during an event?
Answer: C
A SOC analyst wants to improve the proactive detection of malicious emails before they are delivered to the destination inbox. Which of the following is the best approach the SOC analyst can recommend?
Answer: B
Which of the following is a benefit of the Diamond Model of Intrusion Analysis?
Answer: A
"The Diamond Model of Intrusion Analysis is a framework that helps analysts to understand the relationships between the adversary, the victim, the infrastructure, and the capability involved in an attack. It also enables analytical pivoting, which is the process of moving from one piece of information to another related one, and identifies knowledge gaps that need further investigation."
Source: Adapted from community discussion — bufffalobilll
When starting an investigation, which of the following must be done first?
Answer: B
Certmaster Topic 8B: Performing Incident Response Activities A forensic investigation includes the following four phases: 1) Identification: A) Ensure that the scene is safe. Threat to life or injury takes precedence over evidence collection. B) Secure the scene to prevent contamination of evidence. Record the scene using video and identify witnesses for interview. C) Identify the scope of evidence to be collected. 2) Collection 3)Analysis
Source: Adapted from community discussion — [Removed]
An incident responder was able to recover a binary file through the network traffic. The binary file was also found in some machines with anomalous behavior. Which of the following processes most likely can be performed to understand the purpose of the binary file?
Answer: C
I'm going with C because: - Reverse engineering is a common answer to CySa+ practice questions pertaining to investigating binary files - I haven't seen anything in my study material, nor the objectives, regarding "File Debugging." - ChatGPT (o1 model) said the answer is C, Reverse Engineering
Source: Adapted from community discussion — fafd232_
A manufacturing company’s assembly line machinery only functions on an end-of-life OS. Consequently, no patches exist for several highly exploitable OS vulnerabilities. Which of the following is the best mitigating control to reduce the risk of these current conditions?
Answer: A
A makes the most sense to segment from everything as best as you can when it is highly exploitable vulnerabilities. I think this is a obvious one.
Source: Adapted from community discussion — 1403ad2
Which of the following will most likely cause severe issues with authentication and logging?
Answer: D
pretty simple one, TTL (time to live) of packets or request will die before they get to you and time zone difference may lock you out
Source: Adapted from community discussion — 1403ad2
Several critical bugs were identified during a vulnerability scan. The SLA risk requirement is that all critical vulnerabilities should be patched within 24 hours. After sending a notification to the asset owners, the patch cannot be deployed due to planned, routine system upgrades. Which of the following is the best method to remediate the bugs?
Answer: A
"Several critical bugs" were found and the "SLA risk requirement is....critical vulnerabilities should be patched within 24 hours." the answer is to reschedule updates and prioritize the patching.
Source: Adapted from community discussion — 1403ad2
A company is in the middle of an incident, and customer data has been breached. Which of the following should the company contact first?
Answer: D
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
CS0-003 practice, question 231. 527 questions available.
Version 1.0.0. How we source questions