CySA 003 Domain 3 Exam Questions and
Answers with Verified Solutions | Latest
Updated 2026
Which one of the following is an Former employee crashes a server
example of a computer security 3 multiple choice options
incident?
During what phase of the incident Preparation
response process would an 3 multiple choice options
organization implement defenses
designed to reduce the likelihood
of
a security incident?
Alan is responsible for developing SIEM
his organization's detection and 3 multiple choice options
analysis capabilities. He would like
to
purchase a system that can
combine
log records from multiple sources
to
detect potential security incidents.
What type of system is best suited
to
meet Alan's security objective?
, Ben is working to classify the Medium
functional impact of an incident. 3 multiple choice options
The
incident has disabled email service
for approximately 30 percent of his
organization's staff. How should
Ben
classify the functional impact of
this
incident according to the NIST
scale?
What phase of the incident Containment, eradication, and recovery
response 3 multiple choice options
process would include measures
designed to limit the damage
caused
by an ongoing breach?
What common criticism is leveled It includes actions outside the defended
at network.
the Cyber Kill Chain? 3 multiple choice options
Karen is responding to a security Proprietary breach
incident that resulted from an 3 multiple choice options
intruder stealing files from a
government agency. Those files
contained unencrypted information
about protected critical
infrastructure. How should Karen
rate the information impact of this
loss?
Answers with Verified Solutions | Latest
Updated 2026
Which one of the following is an Former employee crashes a server
example of a computer security 3 multiple choice options
incident?
During what phase of the incident Preparation
response process would an 3 multiple choice options
organization implement defenses
designed to reduce the likelihood
of
a security incident?
Alan is responsible for developing SIEM
his organization's detection and 3 multiple choice options
analysis capabilities. He would like
to
purchase a system that can
combine
log records from multiple sources
to
detect potential security incidents.
What type of system is best suited
to
meet Alan's security objective?
, Ben is working to classify the Medium
functional impact of an incident. 3 multiple choice options
The
incident has disabled email service
for approximately 30 percent of his
organization's staff. How should
Ben
classify the functional impact of
this
incident according to the NIST
scale?
What phase of the incident Containment, eradication, and recovery
response 3 multiple choice options
process would include measures
designed to limit the damage
caused
by an ongoing breach?
What common criticism is leveled It includes actions outside the defended
at network.
the Cyber Kill Chain? 3 multiple choice options
Karen is responding to a security Proprietary breach
incident that resulted from an 3 multiple choice options
intruder stealing files from a
government agency. Those files
contained unencrypted information
about protected critical
infrastructure. How should Karen
rate the information impact of this
loss?
