Comptia Cysa+ (Cs0-003) Practice Exam Questions Set 3 Verified 100% Correct

COMPTIA CYSA+ (CS0-003) PRACTICE EXAM QUESTIONS SET 3 VERIFIED 100% CORRECT Recommendations -Answer-List of changes suggested to improve security or address breaches Collect evidence -Answer-Action taken by a security team to verify claims of a breach Security information and event mgmt (SIEM) tool -Answer-Tool used to manage security logs and events from various sources SIEM tool feature -Answer-Data analysis Email retention for regulatory compliance -Answer-Legal hold Action to address potential security incidents -Answer-Harden systems and set up confidential communication lines Report requested after internet outage investigation -Answer-Root cause analysis Release details to the public after executive arrest -Answer-Media Stolen work laptop investigation -Answer-Law enforcement Server outage investigation -Answer-Forensic Post-incident report for incident resolution -Answer-Lessons learned Incident reporting to law enforcement -Answer-Law enforcement HIPAA data breach response -Answer-Legal Data backup incident reporting -Answer-Law enforcement Security incident report preparation -Answer-Lessons learned Cyber attack analysis model -Answer-Cyber kill chain Framework for security assessment -Answer-Open Source Security Testing Methodology Manual (OSSTMM) Phishing attack protection solution -Answer-Domain-based Message Authentication, Reporting, and Conformance (DMARC) Open Source Security Testing Methodology Manual (OSSTMM) -Answer-Covers physical, information, and wireless security aspects for security assessment Cuckoo -Answer-Tool used to isolate and analyze malware behavior Endpoint Detection and Response (EDR) -Answer-Enhances endpoint security by providing real-time visibility into endpoint activity Security Orchestration, Automation, and Response (SOAR) -Answer-Platform used to automate incident responses in security incidents MITRE ATT&CK -Answer-Framework for analyzing attacker's tactics, techniques, and procedures (TTPs) tcpdump -Answer-Tool used to monitor network performance and capture/analyze network packets Domain-based Message Authentication (DMARC) -Answer-Method used to determine email legitimacy by analyzing domain-based authentication Sender Policy Framework (SPF) -Answer-Technology to prevent email spoofing and protect against phishing attempts Nmap -Answer-Tool for identifying open ports, services, and determining OS and applications on network devices Recon-ng -Answer-Tool for automating information gathering and reconnaissance in penetration testing Network traffic analyzer -Answer-Tool for identifying causes of high bandwidth usage, monitoring traffic, and optimizing utilization Quality of service -Answer-Technique for optimizing bandwidth utilization and addressing network congestion Beaconing -Answer-Technique where attacker sends small, periodic signals to a remote server Port scan -Answer-Scan to detect unauthorized devices and services on a network Data exfiltration -Answer-Transferring sensitive data outside the organization's network Nessus -Answer-Tool for comprehensive vulnerability assessment to identify security weaknesses Patching -Answer-Action that allows a company to keep devices current and address vulnerabilities Configuration mgmt -Answer-Control that a systems administrator should focus on to maintain consistency, compliance, and security Mitigation -Answer-Action taken to resolve critical vulnerabilities found in a security report Compensating controls -Answer-Implementation to address a security requirement without modifying a critical application Chief Information Security Officer (CISO) -Answer-Responsible for improving security posture and ensuring teams work together to protect systems Risk score -Answer-Score indicating the level of risk associated with a finding or situation Vulnerability reporting -Answer-Component that rates the current setup of a system and provides suggestions for improvement Awareness training -Answer-Training to educate employees on security risks and best practices Service-level objectives -Answer-Metrics used by a department to determine project implementation worthiness