13 questions selected from source version V8.02
COMPTIA CYBERSECURITY ANALYST
Question 1
The Chief Information Security Officer wants to improve internal security measures by continuously validating
and verifying access to the production environment.
Which of the following concepts best describes this practice?
A. Secure access service edge
B. Next-generation firewall
C. Zero Trust
D. Privileged access management
Answer: C
COMPTIA CYBERSECURITY ANALYST
Question 2
Which of the following network architectures would best implement a perimeter-less network topology?
A. Hybrid cloud networks
B. Secure access service edge
C. Cloud-native computing
D. Content delivery networks
Answer: B
COMPTIA CYBERSECURITY ANALYST
Question 3
A security analyst uses a full pcap solution to extract all traffic from the last two days associated with the
10.213.4.27 file server.
This file server is under investigation due to concerns about potential data exfiltration using Domain Name
System (DNS) traffic.
Which of the following commands should the analyst use to extract any potentially leaked data from the
suspicious.pcap file?
A. strings suspicious.pcap | grep 10.213.4.27
B. zeek -r suspicious.pcap; grep 10.213.4.27 file.log
C. snort -r suspicious.pcap; grep eve.log 10.213.4.27
D. tcpdump -r suspicious.pcap port 53 and host 10.213.4.27
Answer: D
Page 2