CYSA+ FINAL EXPECTED QUESTIONS WITH VERIFIED
ANSWERS
Question 1.
In the context of Technical Data and Privacy Controls, what is EDM?
ANSWER
Exact Data Match is a database of strings of actual private data converted to fingerprints
through a hash process
Question 2.
Following a serious data breach affecting a supplier company, your CEO wants assurance that your
company is not exposed to the same risk. The supplier is willing to share threat data gathered about
the breach with you. You advise a threat hunting program as the most appropriate tool to use. What
should be the first step in this process?
ANSWER
The first step in the threat hunting process should be to form a hypothesis.
Question 3.
What methods can you use to validate the results of a vulnerability scan? (select all that apply)
ANSWER
Compare to compliance or configuration baselines, Review logs and other data sources,
Repeat the scan (possibly using a different scanner)
Question 4.
Eric wants to send an email using a digital signature to ensure that the recipient can prove that the
email was sent by him and that the content has not changed. What technology is frequently used for
this?
ANSWER
S/MIME
,Question 5.
Public information does not have any required security attributes. True or False?
ANSWER
False
Question 6.
When using a vulnerability scanner in a regulated environment, the regulator might impose
requirements on the types of scans and scan frequency to remain compliant. True or False?
ANSWER
True
Question 7.
The process for reidentifying tokenized data involves using the token server to look up the original
value of the token. True or False?
ANSWER
True
Question 8.
You want to determine if a message you received was forwarded by analyzing the headers of the
message. How can you determine this?
ANSWER
You cannot determine if a message was forwarded by analyzing the headers.
Question 9.
What is the function of the -A switch in Nmap?
ANSWER
Enables OS detection, version detection, script scanning, and traceroute
, Question 10.
Which of the following IS NOT an example of secure coding best practices? Authentication, Input
validation, Output encoding, Output validation
ANSWER
Output validation
Question 11.
What is the definition of a Course of Action (CoA) matrix?
ANSWER
It maps the controls available for each type of function to adversary tools and tactics
Question 12.
What are your strategic, operational, and tactical requirements for threat intelligence?
ANSWER
Strategic requirements are related to overall themes and objectives that affect projects and
business priorities. This is the information that should be shared with executives in less
technical terms in order for them to make high-level decisions. This would include any large
security trends and events related to the new cloud-based infrastructure, so that timely
decisions can be made that keep the company in front of the quickly changing technology.
Operational intelligence relates to the everyday priorities of managers and specialists. In this
case, it would be necessary to understand who might be interested in compromising the
system and how they might infiltrate the new cloud-based system in order to decide which
steps to take in the near future. Tactical requirements relate to the actions that should taken
by staff in response to specific alerts or status indicators. This type of intelligence is highly
technical and would be gathered from system logs and automated feeds.
Question 13.
Identify the main principles of effective API key management. (choose 3) Use least privileges policies
for each account/key, Change passwords every 90 days, Only apply patches in months with a "Y",
Delete unused keys and regenerate live keys periodically, Do not embed keys in source code
ANSWER
Use least privileges policies for each account/key, Delete unused keys and regenerate live keys
periodically, Do not embed keys in source code
ANSWERS
Question 1.
In the context of Technical Data and Privacy Controls, what is EDM?
ANSWER
Exact Data Match is a database of strings of actual private data converted to fingerprints
through a hash process
Question 2.
Following a serious data breach affecting a supplier company, your CEO wants assurance that your
company is not exposed to the same risk. The supplier is willing to share threat data gathered about
the breach with you. You advise a threat hunting program as the most appropriate tool to use. What
should be the first step in this process?
ANSWER
The first step in the threat hunting process should be to form a hypothesis.
Question 3.
What methods can you use to validate the results of a vulnerability scan? (select all that apply)
ANSWER
Compare to compliance or configuration baselines, Review logs and other data sources,
Repeat the scan (possibly using a different scanner)
Question 4.
Eric wants to send an email using a digital signature to ensure that the recipient can prove that the
email was sent by him and that the content has not changed. What technology is frequently used for
this?
ANSWER
S/MIME
,Question 5.
Public information does not have any required security attributes. True or False?
ANSWER
False
Question 6.
When using a vulnerability scanner in a regulated environment, the regulator might impose
requirements on the types of scans and scan frequency to remain compliant. True or False?
ANSWER
True
Question 7.
The process for reidentifying tokenized data involves using the token server to look up the original
value of the token. True or False?
ANSWER
True
Question 8.
You want to determine if a message you received was forwarded by analyzing the headers of the
message. How can you determine this?
ANSWER
You cannot determine if a message was forwarded by analyzing the headers.
Question 9.
What is the function of the -A switch in Nmap?
ANSWER
Enables OS detection, version detection, script scanning, and traceroute
, Question 10.
Which of the following IS NOT an example of secure coding best practices? Authentication, Input
validation, Output encoding, Output validation
ANSWER
Output validation
Question 11.
What is the definition of a Course of Action (CoA) matrix?
ANSWER
It maps the controls available for each type of function to adversary tools and tactics
Question 12.
What are your strategic, operational, and tactical requirements for threat intelligence?
ANSWER
Strategic requirements are related to overall themes and objectives that affect projects and
business priorities. This is the information that should be shared with executives in less
technical terms in order for them to make high-level decisions. This would include any large
security trends and events related to the new cloud-based infrastructure, so that timely
decisions can be made that keep the company in front of the quickly changing technology.
Operational intelligence relates to the everyday priorities of managers and specialists. In this
case, it would be necessary to understand who might be interested in compromising the
system and how they might infiltrate the new cloud-based system in order to decide which
steps to take in the near future. Tactical requirements relate to the actions that should taken
by staff in response to specific alerts or status indicators. This type of intelligence is highly
technical and would be gathered from system logs and automated feeds.
Question 13.
Identify the main principles of effective API key management. (choose 3) Use least privileges policies
for each account/key, Change passwords every 90 days, Only apply patches in months with a "Y",
Delete unused keys and regenerate live keys periodically, Do not embed keys in source code
ANSWER
Use least privileges policies for each account/key, Delete unused keys and regenerate live keys
periodically, Do not embed keys in source code
