[2026] CompTIA Cybersecurity Analyst (CySA+) Certification

문제1

A company ' s user accounts have been compromised. Users are also reporting that the company ' s internal portal is sometimes only accessible through HTTP, other times; it is accessible through HTTPS. Which of the following most likely describes the observed activity?

A. An on-path attack is being performed by someone with internal access that forces users into port 80

B. There is an issue with the SSL certificate causinq port 443 to become unavailable for HTTPS access

C. An error was caused by BGP due to new rules applied over the company ' s internal routers

D. The web server cannot handle an increasing amount of HTTPS requests so it forwards users to port 80

정답: A

설명: (Fast2test 회원만 볼 수 있음)

문제2

After identifying a threat, a company has decided to implement a patch management program to remediate vulnerabilities. Which of the following risk management principles is the company exercising?

A. Mitigate

B. Transfer

C. Avoid

D. Accept

정답: A

설명: (Fast2test 회원만 볼 수 있음)

문제3

A list of loCs released by a government security organization contains the SHA-256 hash for a Microsoft- signed legitimate binary, svchost. exe. Which of the following best describes the result if security teams add this indicator to their detection signatures?

A. Security teams would detect event entries detailing executionofknown-malicioussvchost. exe processes.

B. This indicator would fire on the majority of Windows devices.

C. Security teams would detect rogue svchost. exe processesintheirenvironment.

D. Malicious files with a matching hash would be detected.

정답: B

설명: (Fast2test 회원만 볼 수 있음)

문제4

Which of the following evidence collection methods is most likely to be acceptable in court cases?

A. Creating a file-level archive of all files

B. Copying all access files at the time of the incident

C. Providing a full system backup inventory

D. Providing a bit-level image of the hard drive

정답: D

설명: (Fast2test 회원만 볼 수 있음)

문제5

An organization ' s threat intelligence team notes a recent trend in adversary privilege escalation procedures.
Multiple threat groups have been observed utilizing native Windows tools to bypass system controls and execute commands with privileged credentials. Which of the following controls would be most effective to reduce the rate of success of such attempts?

A. Harden systems by disabling or removing unnecessary services.

B. Disable administrative accounts for any operations.

C. Implement MFA requirements for all internal resources.

D. Implement controls to block execution of untrusted applications.

정답: D

설명: (Fast2test 회원만 볼 수 있음)

문제6

A security analyst is trying to identify possible network addresses from different source networks belonging to the same company and region. Which of the following shell script functions could help achieve the goal?

A. function z() { c=$(geoiplookup$1) & & echo "$1 | $c" }

B. function w() { a=$(ping -c 1 $1 | awk-F "/" 'END{print $1}') & & echo "$1 | $a" }

C. B. function x() { b=traceroute -m 40 $1 | awk 'END{print $1}') & & echo "$1 | $b" }

D. C. function y() { dig $(dig -x $1 | grep PTR | tail -n 1 | awk -F ".in-addr" '{print $1}').origin.asn.cymru.
com TXT +short }

정답: D

설명: (Fast2test 회원만 볼 수 있음)

문제7

An analyst investigated a website and produced the following:
Starting Nmap 7.92 ( https://nmap.org ) at 2022-07-21 10:21 CDT
Nmap scan report for insecure.org (45.33.49.119)
Host is up (0.054s latency).
rDNS record for 45.33.49.119: ack.nmap.org
Not shown: 95 filtered tcp ports (no-response)
PORT STATE SERVICE VERSION
22/tcp open ssh OpenSSH 7.4 (protocol 2.0)
25/tcp closed smtp
80/tcp open http Apache httpd 2.4.6
113/tcp closed ident
443/tcp open ssl/http Apache httpd 2.4.6
Service Info: Host: issues.nmap.org
Service detection performed. Please report any incorrect results at https://nmap .org/submit/ .
Nmap done: 1 IP address (1 host up) scanned in 20.52 seconds
Which of the following syntaxes did the analyst use to discover the application versions on this vulnerable website?

A. nmap-A insecure.org

B. nmap-sS -T4 -F insecure.org

C. nmap-0 insecure.org

D. nmap-sV -T4 -F insecure.org

정답: D

설명: (Fast2test 회원만 볼 수 있음)

문제8

An organization recently changed its BC and DR plans. Which of the following would best allow for the incident response team to test the changes without any impact to the business?

A. Migrate active workloads from the primary data center to the secondary location.

B. Compare the current plan to lessons learned from previous incidents.

C. Perform a tabletop drill based on previously identified incident scenarios.

D. Simulate an incident by shutting down power to the primary data center.

정답: C

설명: (Fast2test 회원만 볼 수 있음)

문제9

A user downloads software that contains malware onto a computer that eventually infects numerous other systems. Which of the following has the user become?

A. Script kiddie

B. Advanced persistent threat

C. Hacklivist

D. Insider threat

정답: D

설명: (Fast2test 회원만 볼 수 있음)

CompTIA Cybersecurity Analyst (CySA+) Certification - CS0-003무료 덤프문제 풀어보기

우리와 연락하기

유용한 링크

최신 업데이트