stud
bud
Sign up
Log in
Home
Library
Explore
SAT
More
CYSA+ Cybersecurity Flashcards | StudBud
Explore
/
CYSA+ Cybersecurity
CYSA+ Cybersecurity
23 terms
·
StudBud Administration
Imported from external platform
Flashcards
23 cards
F
Practice quiz
P
Host live
L
Questions
23
Answers
1
Which of the following describe what has occurred?
The host downloaded an application from utoftor.com
The host attempted to download an application from utoftor.com
The host rejected the connection from utoftor.com
The host attempted to make a secure connection to utoftor.com
2
Which is the best metric for an organization to focus on given recent investment in SIEM, SOAR, and the ticketing system
Numbers of exploits by tactics
Quantity of intrusion attempts
Alert volume
Meantime to detect
3
Which of the following factors would determine the regulations placed on data under data sovereignty laws?
The data laws of the country in which the company is located
What the company intends to do with the data it’s own
The type of data of the company stores
The company’s data security policy
4
Which of the following should a security analyst recommend to fix the issue?
Open the access.log file and read/write mode
Perform input sanitization
Replace the strcpy function
Increase the size of foul data butter
5
Which of the following best explains the functions of TPM
To ensure platforms confidentiality by storing security measurements
To provide hardware base security receiving unique keys
To implement encryption algorithms for hard drive
To prove management of the OS installation
6
Which of the following is an advantage of SOAR over SIEM
SOAR can aggregate data from many sources
SOAR is much less expensive
SOAR uses more robust encryption protocols
SOAR reduces the amount of human intervention required
7
The CISO wants to track the data assets by name, type, content, data profile. Which best describes what the CIS wants.
SIEM
DLP
Asset tagging
File integrity monitor
8
A developer wants to convert user generated input in a web form before it’s displayed on the browser. This is called.
Query parameterization
Data protection
Input validation
Output encoding
9
Which of the following items should be included in a vulnerability scan report?(Choose two)
Lessons learned
Education plan
Affected hosts
Playbook
Risk score
Service -level agreement
10
A security analyst received a malicious binary file to analyze. Which is the best to perform the analysis?
Reverse engineering
Fuzzing
Code analysis
Statistic analysis
11
Technical troubleshooting Best Practice Methology - what is the first step?
Get someone else to do it , cause I ain’t got time
Identify the problem
Test Theory to determine cause
Establish plan of action
12
A threat hurting teen received a new LLC from an ISA that follows a threat actors profile and activities . What’s next?
The IDS signature
The whitelist
The blocklist
The DNS
13
Which of the following should the cyber security analyst recommend to harden the server? ( Choose two)
E. Blackport 80 with a host based firewall.
B. Perform a vulnerability scan.
F. Change the SSH port to a non-standard port.
Disable the Telnet service
A . uninstall, the DNS service
C. Change the server’s IP to a private IP address.
14
Describe how a CSIRT lead determines who should be communicated with and when during a security incident
Experts on the team should communicate with others within a specified area
The lead has the authority to decide who to communicate with at any time
Management level members of the CSIRT should make that decision
The lead should review what is documented in the incident response policy
15
Which of the following capabilities will most likely meet security objectives of the request?
D
A
B
C
16
Which of the following would security analyst most likely used to compare TTPs between different known adversaries?
OWASP
Cyber KILL Cham
MITRE ATT&CK
STIX/TAXII
17
Which of the following would best prevent exposure of PII outside of an organization?
IDS
DLP
PAM
PKI
18
Which of the following username should security the analyst investigate further?
User 4
User 3
User 1
User 2
19
A technician identifies vulnerability in a sever and applies a software patch. What is the next step in remediation?
Testing
Implementation
Rollback
Validation
20
A cold review reveals a web application is using line based cookies for session management. This is a concern because?
Guess
Decrypt
Decode
Parameterize
21
An organization has experienced a breach of customer transactions under the terms of PCIDSS who do you report breach to?
Card issuer
Local law enforcement
Federal law enforcement
PCI security standards council
22
A user downloads software that contains malware. that infects numerous other systems. Which answer has the user become?
Insider threat
Advanced persistent threat
Hacktivist
Script kiddie
23
Which of the following types of controls defines placing an ACL on a file folder?
Confidentiality control
Operational control
Managerial control
Technical control
