CySA? I guess.. let's do it

18 Which should be included in a vulnerability scan report? (Choose two.)

7

5

32 To streamline threat intelligence analysis, what tool could Mark use to consolidate multiple feeds effectively?

27 What is the following output from and what is one statement that is true about it?

31 How could someone minimize human interaction and enhance the Security Operations Center (SOC) process?

33 What is the primary difference between SIEM and SOAR?

21 What tool is used as a way of enforcing a security policy between cloud customers and cloud services, as well?

17 Lester fell for the African prince email... again. Which security control would best stop this from repeating?

12 After reviewing CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H ... Which attibute(s) correctly identify this?

11

8

1

38 To start "What We Have Learned" report on a data exfiltration attack, how should Jon begin preparations effectively?

29 How do you attempt a stealth scan out of these options?

25

10

6

16 Robert is running servers and one of them gets infected by ransomware! What should he do RIGHT NOW?

14

26 How would I attempt to find the IP addresses of the web-based servers that are running on the target?

15 What is typically done to prevent the exposure of PII to someone outside of your company (with or without malintent)

24 What would be the goal for security team to focus on given new installation of SIEM, SOAR, and a ticketing software?

28 Anaid has a peanut butter jelly sandwich. She is allergic to peanut butter, but does it anyway. What is this called?

30 Justin observes anomalous behavior at his power plant, and things overheat. Which would best help him identify IoCs?

37

3

35 What kind of script are we looking at below?

22 After closing, every night at 7:00 PM, an employee sends an email to an unknown email address. What may this be?

19 Deanthony is fed up with his company, and decides to put a logic bomb on his coworkers' PCs. What has he become?

23 Boris found the following line on his web server logs:<IMGSRC=’vbscript:msgbox(“mclovin")’>. What is this?

34 What is the first thing you need to do when starting an investigation into a cyber security event?

2

36 Gerald needs to collect some evidence for a cyber crime investigation. In terms of volatility, which is first?

9 Pertaining to CVSS criteria, which should you be most worried about of the lines below?

13 Arrol submitted data to a web application that let him get all the user credentials from it. What is recommended?

20 After identifying a threat, Kwaku implements a patch management using WSUS. What risk management is he performing?

4