CompTIA Cybersecurity Analyst (CySA+) Certification Exam

Question 1

A security analyst is attempting to resolve an incident in which highly confidential company pricing information was sent to clients. It appears this information was unintentionally sent by an employee who attached it to public marketing material. Which of the following configuration changes would work BEST to limit the risk of this incident being repeated?

A. Sanitize the marketing material.

B. Update the insider threat procedures.

C. Update the DLP rules and metadata.

D. Add client addresses to the blocklist.

Correct Answer: C

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 2

A vulnerability assessment solution is hosted in the cloud This solution will be used as an accurate inventory data source for both the configuration management database and the governance nsk and compliance tool An analyst has been asked to automate the data acquisition Which of the following would be the BEST way to acqutre the data'

A. Machine learning

B. API

C. CSV export

D. SOAR

Correct Answer: B

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 3

A forensic analyst is conducting an investigation on a compromised server Which of the following should the analyst do first to preserve evidence''

A. Back up all log files and audit trails

B. Create a system timeline

C. Monitor user access to compromised systems

D. Restore damaged data from the backup media

Correct Answer: A

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 4

An organization's internal department frequently uses a cloud provider to store large amounts of sensitive dat a. A threat actor has deployed a virtual machine to at the use of the cloud hosted hypervisor, the threat actor has escalated the access rights. Which of the following actions would be BEST to remediate the vulnerability?

A. Implement dedicated hardware for each customer.

B. Update lo the secure hypervisor version.

C. Sandbox the virtual machine.

D. Implement an MFA solution.

Correct Answer: B

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 5

When investigating a compromised system, a security analyst finds the following script in the /tmp directory:

Which of the following attacks is this script attempting, and how can it be mitigated?

A. This is a password-hijacking attack, and it can be mitigated by using strong encryption protocols.

B. This is a credential-stuffing attack, and it can be mitigated by using multistep authentication.

C. This is a password-dictionary attack, and it can be mitigated by forcing password changes every 30 days.

D. This is a password-spraying attack, and it can be mitigated by using multifactor authentication.

Correct Answer: D

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 6

A cybersecurity analyst is concerned about attacks that use advanced evasion techniques. Which of the following would best mitigate such attacks?

A. Updating the antivirus software

B. Applying network segmentation

C. Installing a proxy server

D. Keeping IPS rules up to date

Correct Answer: D

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 7

A customer notifies a security analyst that a web application is vulnerable to information disclosure The analyst needs to indicate the seventy of the vulnerability based on its CVSS score, which the analyst needs to calculate When analyzing the vulnerability the analyst realizes that tor the attack to be successful, the Tomcat configuration file must be modified Which of the following values should the security analyst choose when evaluating the CVSS score?

A. Physical

B. Adjacent

C. Local

D. Network

Correct Answer: B

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 8

The IT department is concerned about the possibility of a guest device infecting machines on the corporate network or taking down the company's singe internet connection. Which of the following should a security analyst recommend to BEST meet the requirements outlined by the IT Department?

A. Configure NAC to only allow machines on the network that are patched and have active antivirus.

B. Configure the IPS with rules that will detect common malware signatures traveling from the guest network.

C. Require the guest machines to install the corporate-owned EDR solution.

D. Place a firewall In between the corporate network and the guest network

Correct Answer: D

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 9

After detecting possible malicious external scanning, an internal vulnerability scan was performed, and a critical server was found with an outdated version of JBoss. A legacy application that is running depends on that version of JBoss. Which of the following actions should be taken FIRST to prevent server compromise and business disruption at the same time?

A. Create a proper DMZ for outdated components and segregate the JBoss server.

B. Apply visualization over the server, using the new platform to provide the JBoss service for the legacy application as an external service.

C. Make a backup of the server and update the JBoss server that is running on it.

D. Contact the vendor for the legacy application and request an updated version.

Correct Answer: A

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 10

A security analyst needs to recommend a solution that will allow users at a company to access cloud-based SaaS services but also prevent them from uploading and exflltrating dat a. Which of the following solutions should the security analyst recommend?

A. CASB

B. MFA

C. DLP

D. VPS

E. VPN

Correct Answer: A

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 11

A company experienced a security compromise due to the inappropriate disposal of one of its hardware appliances. Sensitive information stored on the hardware appliance was not removed prior to disposal. Which of the following is the BEST manner in which to dispose of the hardware appliance?

A. Ensure the hardware appliance has the ability to encrypt the data before disposing of it.

B. Establish guidelines for the handling of sensitive information.

C. Return the hardware appliance to the vendor, as the vendor is responsible for disposal.

D. Dispose of all hardware appliances securely, thoroughly, and in compliance with company policies.

Correct Answer: D

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 12

During a risk assessment, a senior manager inquires about what the cost would be if a unique occurrence would impact the availability of a critical service. The service generates $1 ,000 in revenue for the organization. The impact of the attack would affect 20% of the server's capacity to perform jobs. The organization expects that five out of twenty attacks would succeed during the year. Which of the following is the calculated single loss expectancy?

A. $200

B. $800

C. $5,000

D. $20,000

Correct Answer: A

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

CompTIA Cybersecurity Analyst (CySA+) Certification - CS0-002 Exam Practice Test

Latest Update

Useful Links

Contact Us