CySA+ Lessons 1/2A/2B

Question 1

A firewall is an example of a preventative control.

Accepted Answer

True

Question 2

Indicators of Attack (IoAs) are the same as Indicators of Compromise (IoCs).

Accepted Answer

False

Question 3

The CIA triad stands for Confidentiality, Integrity, and Accountability.

Accepted Answer

False

Question 4

Which security control type focuses on restoring systems after an attack?

Accepted Answer

Corrective

Question 5

Which of the following is NOT part of the Kill Chain model?

Accepted Answer

Vulnerability Patching

Question 6

What is the main function of a SOC?

Accepted Answer

Monitor, detect, and respond to cybersecurity incidents

Question 7

Which of the following best describes behavioral threat research?

Accepted Answer

It analyzes tactics, techniques, and procedures (TTPs) used in attacks

Question 8

Threat intelligence sources can include open-source intelligence (OSINT) and proprietary feeds

Accepted Answer

True

Question 9

SIEM systems help in log aggregation and security event analysis.

Accepted Answer

True

Question 10

What is a primary benefit of a Security Information and Event Management (SIEM) system?

Accepted Answer

It provides centralized logging and threat detection

Question 11

Which control type focuses on discouraging attackers from targeting a system?

Accepted Answer

Deterrent

Question 12

Which of the following is NOT a typical Indicator of Compromise (IoC)?

Accepted Answer

Regular user login activity

Question 13

Detective controls are designed to stop an attack before it happens.

Accepted Answer

False

Question 14

A SIEM is primarily used to physically secure a data center.

Accepted Answer

False

Question 15

Indicators of Compromise (IoCs) always provide clear and direct evidence of an attack.

Accepted Answer

False

Question 16

Which of the following is NOT a step in the Cyber Threat Intelligence (CTI) lifecycle?

Accepted Answer

Encryption

Question 17

Which of the following is an example of an Indicator of Compromise (IoC)?

Accepted Answer

A spike in network traffic at an unusual time

Question 18

A well-implemented security policy can completely prevent cyberattacks.

Accepted Answer

False

Question 19

Which framework is specifically designed to help understand adversary tactics and techniques?

Accepted Answer

MITRE ATT&CK

Question 20

A botnet can be used in the reconnaissance phase of an attack

Accepted Answer

True

Question 21

The Diamond Model of Intrusion Analysis consists of which four components?

Accepted Answer

Adversary, Capability, Infrastructure, Victim

Question 22

The Kill Chain consists of four steps: Reconnaissance, Delivery, Exploitation, and Actions on Objectives.

Accepted Answer

False

Question 23

What is the purpose of a honeypot in cybersecurity?

Accepted Answer

To attract and analyze potential attackers

Question 24

What is the purpose of the Command and Control (C2) stage in the Kill Chain?

Accepted Answer

To establish communication with the attacker’s server

Question 25

A Security Operations Center (SOC) is only responsible for responding to incidents, not

Accepted Answer

False

Question 26

DDoS attacks often cause a sudden spike in network traffic.

Accepted Answer

True

Question 27

Network reconnaissance is a technique attackers use to gather information about a target system.

Accepted Answer

True

Question 28

Which of the following is NOT a type of security control?

Accepted Answer

Social

Question 29

What is the primary goal of the CIA triad?

Accepted Answer

To balance security between confidentiality, integrity, and availability

Question 30

A sudden increase in failed login attempts may indicate:

Accepted Answer

A brute-force attack

Question 31

The Diamond Model of Intrusion Analysis consists of three core features.

Accepted Answer

False

Question 32

A compensating control is used when:

Accepted Answer

The primary control is not available

Question 33

What does the term "Threat Hunting" refer to?

Accepted Answer

Actively searching for threats before alerts trigger

Question 34

Kill Chain methodology was developed by NIST.

Accepted Answer

False

Question 35

Data exfiltration can be detected by analyzing network traffic patterns.

Accepted Answer

True

Question 36

Technical controls include firewalls, encryption, and authentication mechanisms.

Accepted Answer

True

Question 37

MITRE ATT&CK framework focuses on tactics and techniques used by attackers.

Accepted Answer

True

Question 38

Social engineering attacks rely on exploiting software vulnerabilities.

Accepted Answer

False

Question 39

What is a primary advantage of using the MITRE ATT&CK framework?

Accepted Answer

It focuses on attacker behaviors and techniques

Question 40

In the Kill Chain model, which step involves launching the attack?

Accepted Answer

Exploitation

CySA+ Lessons 1/2A/2B

Questions 40

CySA+ Lessons 1/2A/2B

Questions 40