CySA+ Difficulty Level Flashcards
7 cards from real CySA+ Test practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 7 CySA+ Difficulty Level flashcards as text
Which indicator type is considered the MOST actionable in threat intelligence because it is both specific and timely?
Answer: Tactics, Techniques, and Procedures (TTPs)
TTPs describe adversary behavior and remain valid longer than atomic indicators like IPs or hashes, making them the most actionable intelligence.
A candidate with network security experience but limited scripting exposure should focus exam preparation on which CySA+ skill area?
Answer: Reading and interpreting scripts/code for malicious activity indicators
CySA+ tests the ability to read and interpret code/scripts for indicators of malicious behavior, not to write production code.
Which scanning technique would reveal vulnerabilities that are only exploitable after authenticating to a system?
Answer: Credentialed vulnerability scan
Credentialed scans authenticate to the target and can detect misconfigurations and vulnerabilities invisible to unauthenticated scans.
An analyst is reviewing a memory dump and finds injected shellcode in a legitimate svchost.exe process. Which attack technique does this represent?
Answer: Process hollowing or process injection
Injecting shellcode into a legitimate process like svchost.exe is a process injection technique used to evade detection.
Which cloud security concept ensures that even a compromised cloud provider employee cannot access customer data in plaintext?
Answer: Customer-managed encryption keys (CMEK)
Customer-managed encryption keys ensure the cloud provider never has access to the plaintext decryption key, protecting data even from insider threats.
A CySA+ analyst must communicate a critical vulnerability finding to executive leadership. Which format is MOST appropriate?
Answer: Risk-contextualized executive summary with business impact
Executives need business-context summaries with impact and recommended actions, not raw technical data.
Which technique helps analysts determine the true difficulty of the CySA+ exam before sitting for it?
Answer: Completing official CompTIA practice exams and hands-on lab simulations
Official practice exams and hands-on labs accurately simulate the performance-based question style and cognitive demand of the actual CySA+ exam.