CySA+ Test CySA+ Knowledge Areas Covered 5

Question 1

Which CySA+ domain includes applying secure coding standards and conducting code reviews for vulnerabilities?

Accepted Answer

Software and Systems Security

Answer

Secure coding practices and code review for vulnerabilities are covered under the Software and Systems Security domain.

Question 2

A security analyst uses the Cyber Kill Chain to map an attacker's actions post-compromise. Which stage involves establishing persistence?

Accepted Answer

Installation

Answer

In the Cyber Kill Chain, the Installation stage is where attackers establish persistence through backdoors or trojans.

Question 3

Which CySA+ topic involves analyzing memory dumps to identify injected code or rootkits?

Accepted Answer

Memory Forensics

Answer

Memory forensics involves analyzing RAM dumps to uncover malicious processes, injected code, and fileless malware.

Question 4

An organization uses risk registers to track identified vulnerabilities and remediation timelines. This practice falls under which domain?

Accepted Answer

Compliance and Assessment

Answer

Maintaining risk registers and tracking remediation progress are Compliance and Assessment activities in CySA+.

Question 5

Which CySA+ concept describes the minimum set of privileges needed for a user or system to perform its function?

Accepted Answer

Least Privilege

Answer

The principle of least privilege limits user and system access to only what is required for their specific role or function.

CySA+ Practice Test