stud
bud
Sign up
Log in
Home
Library
Explore
SAT
More
Cyber Analyst Challenge: Are You CySA+ Ready? Flashcards | StudBud
Explore
/
Cyber Analyst Challenge: Are You CySA+ Ready?
Cyber Analyst Challenge: Are You CySA+ Ready?
15 terms
·
StudBud Administration
·
13 plays
Imported from external platform
Flashcards
15 cards
F
Practice quiz
P
Host live
L
Questions
15
Answers
1
A playbook in incident response is a generalized list of best practices, not a step-by-step guide.
False
True
2
Network segmentation can reduce the impact of a security breach.
False
True
3
What is the purpose of a SIEM system?
Encrypt traffic across a network
Aggregate and analyze security data
Create network segmentation policies
Manage hardware asset inventory
4
What does CVSS stand for?
Common Vulnerability Scoring System
Cyber Vulnerability Scoring System
Centralized Vulnerability Security System
Common Vulnerability Severity Scoring
5
Which of the following best describes a vulnerability scan?
Simulated attack to test defenses
Manual attempt to exploit systems
Automated process that identifies weaknesses
Continuous monitoring of network traffic
6
Which of the following is a proactive method to detect unauthorized access?
NetFlow logs
Data Loss Prevention
Honeypot
SIEM alert
7
Behavioral analytics in cybersecurity focus on detecting anomalies based on baseline user activity.
True
False
8
What does the term “threat intelligence” refer to?
Known information about malicious actors and their behavior
The likelihood of a zero-day attack
Logs collected from internal servers
A vulnerability scan result
9
What is the MOST appropriate step after identifying a false positive alert in a SIEM?
Tune the rule or filter
Disable the alert
Escalate to incident response
Block the source IP
10
CVE identifiers are used to classify malware types.
True
False
11
Which framework is commonly used for incident response in cybersecurity?
OWASP Top 10
MITRE ATT&CK
NIST SP 800-61
ISO 27017
12
Phishing simulations can help assess user security awareness.
True
False
13
A cybersecurity analyst finds an MD5 hash mismatch. What does this likely indicate?
The file is encrypted
The file has been altered
The system is infected with a virus
The system clock is incorrect
14
Which port is typically associated with secure LDAP?
22
636
389
443
15
A new zero-day exploit is discovered in a widely used application. What is the BEST immediate action?
Block known IOCs at the firewall
Implement compensating controls
Apply the vendor patch
Disable all user access to the application
