CySA+ Test CySA+ Knowledge Areas Covered 2

Question 1

A security analyst notices that a host is sending beaconing traffic to an external IP every 60 seconds. Which CySA+ domain does this investigation fall under?

Accepted Answer

Security Operations and Monitoring

Answer

Identifying and investigating beaconing behavior is a core Security Operations and Monitoring activity in CySA+.

Question 2

Which CySA+ knowledge area covers the use of YARA rules for identifying malware samples?

Accepted Answer

Threat Intelligence

Answer

Creating and applying YARA rules to identify malware is part of the Threat Intelligence knowledge area in CySA+.

Question 3

When a CySA+ analyst uses the Diamond Model to analyze an attack, which domain is primarily being applied?

Accepted Answer

Threat Intelligence

Answer

The Diamond Model is a threat intelligence framework used to analyze adversary operations and attribution.

Question 4

A company wants to ensure its web application controls align with OWASP Top 10. Which CySA+ domain is most relevant?

Accepted Answer

Software and Systems Security

Answer

Evaluating and securing applications against OWASP Top 10 falls under the Software and Systems Security domain.

Question 5

An analyst is reviewing firewall logs to detect lateral movement after a phishing attack. This activity primarily supports which phase?

Accepted Answer

Identification

Answer

Reviewing logs to determine the scope and path of an attack is part of the Identification phase of incident response.

CySA+ Practice Test

CySA+ Practice Test

CySA+ Test CySA+ Knowledge Areas Covered 2