CySA+ Test CySA+ Knowledge Areas Covered 3

Question 1

Which CySA+ domain includes reviewing security policies and performing gap analyses against frameworks like NIST CSF?

Accepted Answer

Compliance and Assessment

Answer

Gap analyses and framework alignment reviews are core activities in the Compliance and Assessment domain.

Question 2

An analyst correlates endpoint telemetry with network flow data to detect a slow-and-low exfiltration. Which tool category supports this?

Accepted Answer

SIEM

Answer

SIEMs aggregate and correlate telemetry from multiple sources to detect complex, multi-stage attacks like slow exfiltration.

Question 3

Which CySA+ concept involves proactively searching for threats that have evaded existing security controls?

Accepted Answer

Threat Hunting

Answer

Threat hunting is the proactive search for threats that have bypassed automated detection controls.

Question 4

A security team uses sandboxing to detonate a suspicious email attachment. Which domain covers this technique?

Accepted Answer

Threat Intelligence

Answer

Dynamic malware analysis using sandboxes is a Threat Intelligence technique for understanding malware behavior.

Question 5

Which CySA+ domain addresses proper handling and chain of custody for digital evidence?

Accepted Answer

Incident Response

Answer

Evidence collection, preservation, and chain of custody are Incident Response responsibilities under CySA+.

CySA+ Practice Test