CompTIA Cybersecurity Analyst (CySA+)527 questions across 53 pages are complete and free, with no account or card.
527 questions in this bank
Free access · progress saved on this device
The website of a large retail chain is falling to enforce encrypted HTTPS connections, leaving customer account credentials exposed. Which of the following is the best corrective action for resolving this issue?
Answer: B
A security analyst investigates a malware alert from a critical system. The following information is present in the ticket:
Which of the following should the analyst do first?
Answer: B
An application security analyst needs to test a web application for input validation vulnerabilities. The analyst does not have the source code and does not have documentation for the APIs. Which of the following techniques will best aid the analyst in vulnerability testing?
Answer: A
The security team is reviewing a list of vulnerabilities present on the environment, and they want to prioritize the remediation based on the CVSS v4.0 metrics:
Which of the following vulnerabilities should the security manager request to fix first?
Answer: D
A security analyst is investigating an unusually high volume of requests received on a web server. Based on the following command and output:
Which of the following best describes the activity that the analyst will confirm?
Answer: B
A security analyst discovers multiple log entries from a recently acquired tool that was bundled as a YUM package. Those entries point to attempts of privilege escalation. Which of the following Is the most likely explanation?
Answer: D
A company wants to implement protection mechanisms after an incident in which customer information was sent to a third party. Which of the following tools should the company implement?
Answer: D
A security analyst is implementing a process to perform vulnerability management on an ОТ environment: • Systems must remain on an isolated network. • The process should focus on external threats. • No additional software can be deployed on the systems. • Transmitted packets cannot be modified or dropped. • Additional processing delays are not tolerated. Which of the following is the best way to securely meet the requirements?
Answer: A
A managed service provider manages servers in customer-assigned Internet Protocol spaces. The provider discovers that these servers are not included in scheduled network scans, but the provider cannot scan the servers without the customers' explicit permission. Which of the following scanning methods should the provider use to scan these individual servers?
Answer: A
An organization’s security operations center (SOC) team prioritizes confidentiality and integrity over monetary considerations. The SOC team contains a quickly progressing ransomware incident. Which of the following factors motivated the SOC team to take this action? (Choose two.)
Answer: BD
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
CS0-003 practice, question 501. 527 questions available.
Version 1.0.0. How we source questions