CYSA Exam Questions and Answers with
Verified Solutions | Latest Updated 2026
The IT team reports the EDR Whitelist known-good applications
software that is installed on
laptops
is using a large amount of
resources.
Which of the following changes
should a security analyst make to
the
EDR to BEST improve
performance
without compromising security?
A. Quarantine the infected
systems.
B. Disable on-access scanning.
C. Whitelist known-good
applications.
D. Sandbox unsigned applications.
,A security analyst is reviewing the Spoofing
following requirements for new
time
clocks that will be installed in a
shipping warehouse:The clocks
must
be configured so they do not
respond to ARP broadcasts.The
server must be configured with
static
ARP entries for each clock.Which
of
the following types of attacks will
this configuration mitigate?
A. Spoofing
B. Overflows
C. Rootkits
D. Sniffing
Which of the following sources Information sharing and analysis
would a security analyst rely on to
provide relevant and timely threat
information concerning the
financial
services industry?
A. Real-time and automated
firewall
rules subscriptions
B. Open-source intelligence, such
as
social media and blogs
C. Information sharing and
analysis
memberships
D. Common vulnerability and
exposure bulletins
,An information security analyst Take a snapshot of the virtual machine.
discovered a virtual machine
server
was compromised by an attacker.
Which of the following should be
the
FIRST step to confirm and
respond
to the incident?
A. Pause the virtual machine.
B. Shut down the virtual machine.
C. Take a snapshot of the virtual
machine.
D. Remove the NIC from the
virtual
machine.
, As part of an organization's Require all employees to attend updated
information security governance security
process, a Chief Information awareness training and sign an
Security acknowledgement.
Officer (CISO) is working with the
compliance officer to update
policies to include statements
related to new regulatory and legal
requirements. Which of the
following
should be done to BEST ensure all
employees are appropriately
aware
of changes to the policies?
A. Conduct a risk assessment
based
on the controls defined in the
newly
revised policies.
B. Require all employees to attend
updated security awareness
training
and sign an acknowledgement.
C. Post the policies on the
organization's intranet and provide
copies of any revised policies to all
active vendors.
D. Distribute revised copies of
policies to employees and obtain a
signed acknowledgement from
them
Verified Solutions | Latest Updated 2026
The IT team reports the EDR Whitelist known-good applications
software that is installed on
laptops
is using a large amount of
resources.
Which of the following changes
should a security analyst make to
the
EDR to BEST improve
performance
without compromising security?
A. Quarantine the infected
systems.
B. Disable on-access scanning.
C. Whitelist known-good
applications.
D. Sandbox unsigned applications.
,A security analyst is reviewing the Spoofing
following requirements for new
time
clocks that will be installed in a
shipping warehouse:The clocks
must
be configured so they do not
respond to ARP broadcasts.The
server must be configured with
static
ARP entries for each clock.Which
of
the following types of attacks will
this configuration mitigate?
A. Spoofing
B. Overflows
C. Rootkits
D. Sniffing
Which of the following sources Information sharing and analysis
would a security analyst rely on to
provide relevant and timely threat
information concerning the
financial
services industry?
A. Real-time and automated
firewall
rules subscriptions
B. Open-source intelligence, such
as
social media and blogs
C. Information sharing and
analysis
memberships
D. Common vulnerability and
exposure bulletins
,An information security analyst Take a snapshot of the virtual machine.
discovered a virtual machine
server
was compromised by an attacker.
Which of the following should be
the
FIRST step to confirm and
respond
to the incident?
A. Pause the virtual machine.
B. Shut down the virtual machine.
C. Take a snapshot of the virtual
machine.
D. Remove the NIC from the
virtual
machine.
, As part of an organization's Require all employees to attend updated
information security governance security
process, a Chief Information awareness training and sign an
Security acknowledgement.
Officer (CISO) is working with the
compliance officer to update
policies to include statements
related to new regulatory and legal
requirements. Which of the
following
should be done to BEST ensure all
employees are appropriately
aware
of changes to the policies?
A. Conduct a risk assessment
based
on the controls defined in the
newly
revised policies.
B. Require all employees to attend
updated security awareness
training
and sign an acknowledgement.
C. Post the policies on the
organization's intranet and provide
copies of any revised policies to all
active vendors.
D. Distribute revised copies of
policies to employees and obtain a
signed acknowledgement from
them
