CySA+ Exam Test Questions with complete solution graded A+

First step in the NIST cybersecurity risk assessment process? - Identify threats What type of threat would a failure of the power grid be? - Environmental Are penetration tests considered an operational security control? - Yes What risk management strategy is used when implementing a firewall to help reduce the likelihood of a successful attack? - Risk Mitigation When performing 802.1x authentication, what protocol does the authenticator use to communicate with the authentication server? - RADIUS What type of agent must be running on a device trying to join a wireless network that uses 802.1x authentication? - A supplicant Firewall that provides next generation contextual information and can use user/application information to make a decision - Next-Generation Firewall (NGFW) During what phase of a penetration test should testers obtain written authorization to conduct the test? - Planning Phase What step occurs first during the attack phase of a penetration test? - Gaining access What specialized firewall can protect against SQL injections and XSS attacks? - Web Application Firewall (WAF) What is the method used to replicate DNS information for DNS servers and is a tempting exploit for attackers? - Zone TransferWhat flag does nmap use to enable OS identification - -o (lowercase letter "o") What type of image data can be gathered from images on smartphones? - Exif (Exchangeable Image File Format)