stud
bud
Sign up
Log in
Home
Library
Explore
SAT
More
CySA 1 Flashcards | StudBud
Explore
/
CySA 1
CySA 1
15 terms
·
StudBud Administration
·
10 plays
Imported from external platform
Flashcards
15 cards
F
Practice quiz
P
Host live
L
Questions
15
Answers
1
Which security framework focuses on real-time threat detection and response?
DLP
NAC
EDR
VPN
2
This type of threat can link to vendors, suppliers, third party service providers.
SDLC
Cyber Kill Chain
Supply chain threat
OSINT
3
Which of the following is considered an operational security control?
Setting up an ACL policy
Conducting vulnerability scans automatically
The installation of antivirus software
Security audits and incident response planning
4
What is the purpose of compensating controls in cybersecurity?
To provide security measures when primary controls are insufficient
To eliminate the need for encryption
To replace primary security controls entirely
To weaken security policies for easier access
5
What is an approach to software development that integrates security at every phase of the development process?
SASE
PAM
SIEM
SDLC
6
Which of the following is NOT an example of an OSINT source?
News websites
Social media posts
Public records
Secret government database
7
Which of the following is an example of reducing an attack surface?
Regulatory patching software vulnerabilities
Disabling security updates
Allowing unrestricted access to all users
Leaving unused ports open for flexibility
8
What are scheduled timeframes during which system updates, maintenance tasks, and other changes are performed?
User expectation
Maintenance windows
Proactive planning
Rollback
9
Why are automated tests important in CI/CD pipelines?
They ensure code quality and reduce the chance of introducing bugs
They delay the development process
They prevent developers from pushing code changes
They replace human developers with AI completely
10
What does a threat analyst use to measure previous attacks to link to a certain type of threat actor?
TTPs
OWASP
Syslog
DDoS
11
What is a common risk of CD?
Developers must wait months before deploying new features
It eliminates all debugging needs
Code changes may go to production without manual review
It forces a company to stop using CI/CD
12
Which risk management principle eliminates risks by not engaging in activities that pose the risk?
Avoid
Accept
Mitigate
Transfer
13
Which security control type includes firewalls, encryption, and access control lists?
Technical Controls
Operational Controls
Management Controls
Physical Security Controls
14
What tool allows you to see the data provided in the image?
nmap
ipconfig
netstat
syslog
15
What is the first step in the Cyber Kill Chain?
Reconnaissance
Delivery
Exploitationf
Command & Control
