Day 3 CySa +

TJ discovers large data transfers to external IP addresses suggesting a insider threat. What is the likely explanation?

Which framework should the team use to simulate attacks and validate their security controls?

Which control is most appropriate to address outdated components in web app stack vulnerable to remote code execution?

Which type of threat actor is most likely responsible for an APT attack that uses custom malware and avoids detection?

Which control would best mitigate a web application that allows unauthorized access through directory traversal attack?

Which type of scanning method uses an approach that monitors traffic without actively probing the systems?

What is a comprehensive manual for security testing and assessment in cybersecurity?

A consideration when scheduling vulnerability scans during off-peak hours to ensure coverage without disrupting use is?

Which model emphasizes understanding the relationships between adversary, capability, infrastructure and victim?