20:00

PDF|

Guide for CompTIA CySA+

Quiz CompTIA CySA+

Free Test
/ 10

Quiz

1/10
A recent zero-day vulnerability is being actively exploited, requires no user interaction or privilege
escalation, and has a significant impact to confidentiality and integrity but not to availability. Which
of the following CVE metrics would be most accurate for this zero-day threat?
Select the answer
1 correct answer
A.
CVSS: 31/AV: N/AC: L/PR: N/UI: N/S: U/C: H/1: K/A: L
B.
CVSS:31/AV:K/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:L
C.
CVSS:31/AV:N/AC:L/PR:N/UI:H/S:U/C:L/I:N/A:H
D.
CVSS:31/AV:L/AC:L/PR:R/UI:R/S:U/C:H/I:L/A:H

Quiz

2/10
Which of the following tools would work best to prevent the exposure of PII outside of an
organization?
Select the answer
1 correct answer
A.
PAM
B.
IDS
C.
PKI
D.
DLP

Quiz

3/10
An organization conducted a web application vulnerability assessment against the corporate website,


and the following output was observed:

Certification Exam CompTIA CySA+ CompTIA CompTIA-CS0-003 1-4114583750

Which of the following tuning recommendations should the security analyst share?
Select the answer
1 correct answer
A.
Set an HttpOnlvflaq to force communication by HTTPS
B.
Block requests without an X-Frame-Options header
C.
Configure an Access-Control-Allow-Origin header to authorized domains
D.
Disable the cross-origin resource sharing header

Quiz

4/10
Which of the following items should be included in a vulnerability scan report? (Choose two.)
Select the answer
2 correct answers
A.
Lessons learned
B.
Service-level agreement
C.
Playbook
D.
Affected hosts
E.
Risk score
F.
Education plan

Quiz

5/10
The Chief Executive Officer of an organization recently heard that exploitation of new attacks in the
industry was happening approximately 45 days after a patch was released. Which of the following
would best protect this organization?
Select the answer
1 correct answer
A.
A mean time to remediate of 30 days
B.
A mean time to detect of 45 days
C.
A mean time to respond of 15 days
D.
Third-party application testing

Quiz

6/10
A security analyst recently joined the team and is trying to determine which scripting language is
being used in a production script to determine if it is malicious. Given the following script:
Certification Exam CompTIA CySA+ CompTIA CompTIA-CS0-003 2-2520511074

Which of the following scripting languages was used in the script?
Select the answer
1 correct answer
A.
PowerShel
B.
Ruby
C.
Python
D.
Shell script

Quiz

7/10
A company's user accounts have been compromised. Users are also reporting that the company's
internal portal is sometimes only accessible through HTTP, other times; it is accessible through
HTTPS. Which of the following most likely describes the observed activity?
Select the answer
1 correct answer
A.
There is an issue with the SSL certificate causinq port 443 to become unavailable for HTTPS access
B.
An on-path attack is being performed by someone with internal access that forces users into port 80
C.
The web server cannot handle an increasing amount of HTTPS requests so it forwards users to port 80
D.
An error was caused by BGP due to new rules applied over the company's internal routers

Quiz

8/10
A security analyst is tasked with prioritizing vulnerabilities for remediation. The relevant company
security policies are shown below:
Security Policy 1006: Vulnerability Management
1. The Company shall use the CVSSv3.1 Base Score Metrics (Exploitability and Impact) to prioritize
the remediation of security vulnerabilities.
2. In situations where a choice must be made between confidentiality and availability, the Company
shall prioritize confidentiality of data over availability of systems and data.
3. The Company shall prioritize patching of publicly available systems and services over patching of
internally available system.
According to the security policy, which of the following vulnerabilities should be the highest priority
to patch?


A)



Certification Exam CompTIA CySA+ CompTIA CompTIA-CS0-003 5-3160412171

B)

Certification Exam CompTIA CySA+ CompTIA CompTIA-CS0-003 3-3907550635



C)

Certification Exam CompTIA CySA+ CompTIA CompTIA-CS0-003 4-3462342861



D)

Certification Exam CompTIA CySA+ CompTIA CompTIA-CS0-003 6-2839700941
Select the answer
1 correct answer
A.
Option A
B.
Option B
C.
Option C
D.
Option D

Quiz

9/10
Which of the following will most likely ensure that mission-critical services are available in the event
of an incident?
Select the answer
1 correct answer
A.
Business continuity plan
B.
Vulnerability management plan
C.
Disaster recovery plan
D.
Asset management plan

Quiz

10/10
The Chief Information Security Officer wants to eliminate and reduce shadow IT in the enterprise.
Several high-risk cloud applications are used that increase the risk to the organization. Which of the
following solutions will assist in reducing the risk?
Select the answer
1 correct answer
A.
Deploy a CASB and enable policy enforcement
B.
Configure MFA with strict access
C.
Deploy an API gateway
D.
Enable SSO to the cloud applications
Looking for more questions?Buy now

CompTIA CySA+ Practice test unlocks all online simulator questions

Thank you for choosing the free version of the CompTIA CySA+ practice test! Further deepen your knowledge on CompTIA Simulator; by unlocking the full version of our CompTIA CySA+ Simulator you will be able to take tests with over 367 constantly updated questions and easily pass your exam. 98% of people pass the exam in the first attempt after preparing with our 367 questions.

BUY NOW

What to expect from our CompTIA CySA+ practice tests and how to prepare for any exam?

The CompTIA CySA+ Simulator Practice Tests are part of the CompTIA Database and are the best way to prepare for any CompTIA CySA+ exam. The CompTIA CySA+ practice tests consist of 367 questions and are written by experts to help you and prepare you to pass the exam on the first attempt. The CompTIA CySA+ database includes questions from previous and other exams, which means you will be able to practice simulating past and future questions. Preparation with CompTIA CySA+ Simulator will also give you an idea of the time it will take to complete each section of the CompTIA CySA+ practice test . It is important to note that the CompTIA CySA+ Simulator does not replace the classic CompTIA CySA+ study guides; however, the Simulator provides valuable insights into what to expect and how much work needs to be done to prepare for the CompTIA CySA+ exam.

BUY NOW

CompTIA CySA+ Practice test therefore represents an excellent tool to prepare for the actual exam together with our CompTIA practice test . Our CompTIA CySA+ Simulator will help you assess your level of preparation and understand your strengths and weaknesses. Below you can read all the quizzes you will find in our CompTIA CySA+ Simulator and how our unique CompTIA CySA+ Database made up of real questions:

Info quiz:

  • Quiz name:CompTIA CySA+
  • Total number of questions:367
  • Number of questions for the test:50
  • Pass score:80%

You can prepare for the CompTIA CySA+ exams with our mobile app. It is very easy to use and even works offline in case of network failure, with all the functions you need to study and practice with our CompTIA CySA+ Simulator.

Use our Mobile App, available for both Android and iOS devices, with our CompTIA CySA+ Simulator . You can use it anywhere and always remember that our mobile app is free and available on all stores.

Our Mobile App contains all CompTIA CySA+ practice tests which consist of 367 questions and also provide study material to pass the final CompTIA CySA+ exam with guaranteed success. Our CompTIA CySA+ database contain hundreds of questions and CompTIA Tests related to CompTIA CySA+ Exam. This way you can practice anywhere you want, even offline without the internet.

BUY NOW