CySA+ Test CySA+ Knowledge Areas Covered 4

Question 1

A CySA+ analyst receives a CTI feed with IOCs. What is the first step before operationalizing these indicators?

Accepted Answer

Validate and contextualize the indicators

Answer

IOCs must be validated and contextualized to avoid false positives before they are operationalized in detection tools.

Question 2

Which CySA+ domain covers ensuring that third-party vendors meet the organization's security standards?

Accepted Answer

Compliance and Assessment

Answer

Third-party risk management and vendor assessments are covered under the Compliance and Assessment domain.

Question 3

An analyst uses NetFlow data to establish a baseline and then detects anomalies. This technique is part of which domain?

Accepted Answer

Security Operations and Monitoring

Answer

Baselining network behavior and detecting anomalies via NetFlow is a Security Operations and Monitoring technique.

Question 4

Which phase of the incident response lifecycle involves restoring systems from clean backups?

Accepted Answer

Recovery

Answer

Restoring systems from clean backups to resume normal operations is part of the Recovery phase.

Question 5

A CySA+ candidate must understand risk scoring in vulnerability management. Which metric indicates exploitability?

Accepted Answer

CVSS Exploitability Score

Answer

The CVSS Exploitability Score specifically measures how easily a vulnerability can be exploited based on attack vector and complexity.

CySA+ Practice Test