CySA+ Difficulty Level

Question 1

Basic: Which of the following best describes a brute force attack?

Accepted Answer

Attempting all possible password combinations to gain access

Answer

Exploiting a software vulnerability to gain unauthorized access

Answer

Flooding a system with traffic to overwhelm it

Answer

Impersonating a trusted entity to steal information

Question 2

Intermediate: A security analyst detects unusual outbound traffic from a workstation. Which of the following should be the first step in addressing this potential incident?

Accepted Answer

Isolate the workstation from the network

Answer

Notify the user and ask them to stop using the workstation

Answer

Perform a vulnerability scan on the workstation

Answer

Re-image the workstation immediately

Question 3

Advanced: A recent vulnerability scan flagged a critical issue related to outdated OpenSSL libraries. What is the most appropriate action to remediate this vulnerability?

Accepted Answer

Patch or update the OpenSSL libraries to the latest version

Answer

Block incoming traffic to the affected system

Answer

Decommission the system immediately

Answer

Increase monitoring on the affected system

Question 4

Basic: What is the purpose of a web application firewall (WAF)?

Accepted Answer

To detect and block malicious web traffic

Answer

To encrypt data in transit between a browser and a server

Answer

To authenticate users before accessing a web application

Answer

To manage and distribute network traffic evenly

Question 5

Advanced: During a forensic investigation, a security analyst identifies unexpected DNS queries originating from multiple internal hosts. What might this indicate?

Accepted Answer

Malware communicating with a command-and-control server

Answer

A misconfigured DNS server

Answer

A Distributed Denial of Service (DDoS) attack

Answer

A benign application update process