CySA+ Practice Test

Correct answer: Enhances threat intelligence and hunting capabilities. Integrating tools in security operations enhances the ability to differentiate threat intelligence and threat hunting, thereby improving overall security analysis.

Action plans should include stakeholder communication to ensure all parties are informed and involved. That makes Stakeholder communication the best answer because it directly matches the security concept, data source, control, or defensive task the question is testing.

The Persistence tactic is listed under Tactics in the MITRE ATT&CK Enterprise Matrix. That makes Persistence the best answer because it directly matches the security concept, data source, control, or defensive task the question is testing.

CVSS stands for Common Vulnerability Scoring System, which is used to rate the severity of vulnerabilities. That makes Common Vulnerability Scoring System the best answer because it directly matches the security concept, data source, control, or defensive task the question is testing.

Correct answer: DS0018 Firewall Enterprise. The DS0018 data source specifically refers to a firewall that monitors and controls network traffic based on predefined rules, which is relevant for visibility into controlled network traffic.

The Rules Committee plays a key role in setting the standards for vulnerability assessment, including criteria related to exploitability. That makes Rules Committee the best answer because it directly matches the security concept, data source, control, or defensive task the question is testing.

Correct answer: To identify and document evidence for legal proceedings. Forensic analysis aims to preserve, collect, analyze, and present digital evidence in a manner admissible in court.

CySA+ emphasizes conducting vulnerability assessments, prioritizing vulnerabilities, and recommending effective mitigation strategies. That makes Conduct vulnerability assessments, prioritize vulnerabilities, and recommend effective mitigation strategies the best answer because it directly matches the security concept, data source, control, or defensive task the question is testing.

The Access Control family ensures that users have the minimum necessary permissions, aligning with least privilege principles. That makes Access Control the best answer because it directly matches the security concept, data source, control, or defensive task the question is testing.

The CySA+ reporting objective includes action plans, inhibitors to remediation, metrics, KPIs, and stakeholder communication. That makes Action plans, inhibitors to remediation, metrics, key performance indicators, and stakeholder communication the best answer because it directly matches the security concept, data source, control, or defensive task the question is testing.