[2026] CompTIA Cybersecurity Analyst (CySA+) Certification

문제1

An analyst reviews the following system logs from a recent breach attempt:

Which of the following techniques did the attacker attempt to use?

A. Privilege escalation

B. Exfiltration

C. Remote code execution

D. Spoofing

정답: A

설명: (Fast2test 회원만 볼 수 있음)

문제2

Which of the following is a reason the false-positive rate is an important metric for incident response reporting and communication?

A. A high false-positive rate can result in wasted time and resources.

B. A high false-positive rate indicates that the alerting rules are not sensitive enough.

C. A high false-positive rate validates that the incident response plan is working well.

D. A high false-positive rate can help the response team prioritize critical events.

정답: A

설명: (Fast2test 회원만 볼 수 있음)

문제3

Which of the following best explains the purpose of the Pyramid of Pain in threat intelligence?

A. To compare open-source intelligence (OSINT) with closed-source intelligence based on collection cost

B. To show that changing to different types of indicators and behaviors is difficult for an adversary

C. To measure how much operational damage a threat actor can cause before detection occurs

D. To organize attack activity into categories such as spoofing, tampering, and repudiation

정답: B

설명: (Fast2test 회원만 볼 수 있음)

문제4

Which of the following explains how MTTD can affect IR reporting and communication?

A. Improved MTTD ensures the leadership team is made aware of threats before exploitation.

B. MTTD is part of regulatory compliance and outlines an approved process for reporting.

C. The MTTD defines the maximum time allowed between detection and response

D. Having a shorter MTTD reduces the potential impact of an incident.

정답: D

설명: (Fast2test 회원만 볼 수 있음)

문제5

Which of the following describes the importance of an organization understanding SLOs when outsourcing IR to a third party?

A. To understand the hidden costs of an SLA

B. To ensure that an objective risk score can be calculated

C. To track the performance of specific KPIs

D. To quantify the risk appetite in an MOU

정답: C

설명: (Fast2test 회원만 볼 수 있음)

문제6

Which of the following should be configured in a WAF to mitigate an RCE attack?

A. Parameterized queries

B. Rate control in deny mode

C. Stored procedure in the database

D. Rule to detect and block OS commands

정답: D

설명: (Fast2test 회원만 볼 수 있음)

문제7

A BIA document was recently updated to include new critical systems. Which of the following is the most important reason for the update?

A. To include vendor-specific IR training in the security budget

B. To ensure the systems receive the proper priority in a DR scenario

C. To create a business case that explains the importance of the systems

D. To add the systems to forensic analysis in case of a data breach

정답: B

설명: (Fast2test 회원만 볼 수 있음)

문제8

A security operations center (SOC) manager reviews a document signed by the Chief Financial Officer (CFO), the sales director, and a customer to decide whether a contract breach occurred.
Which of the following best describes the document that includes key performance indicators (KPIs)?

A. Tactics, techniques, and procedures (TTPs)

B. Service-level agreement (SLA)

C. Memorandum of understanding

D. Risk management plan

E. Return on investment report

정답: B

설명: (Fast2test 회원만 볼 수 있음)

문제9

A security director at a remote company is concerned about recent threat intelligence reports regarding threat actors who are hired by the company and steal intellectual property. Which of the following solutions are the best ways to identify the tactics, techniques, and procedures (TTPs) used by these threat actors? (Choose two.)

A. Validating identification information manually

B. Conducting thorough background checks on all incoming employees

C. Utilizing user behavioral analytics-based detections implemented in the security information and event management (SIEM)

D. Installing and configuring a data loss prevention tool

E. Deploying a fully featured endpoint detection and response (EDR)

F. Subscribing to an identity proofing service for all employees

정답: C,E

설명: (Fast2test 회원만 볼 수 있음)

CompTIA Cybersecurity Analyst (CySA+) Certification - CS0-004무료 덤프문제 풀어보기

우리와 연락하기

유용한 링크

최신 업데이트