CYSA+ 003 UPDATED ACTUAL Questions and CORRECT Answers
1. Question 1 A. CVSS: 31/AV: N/AC:
A recent zero-day vulnerability is being actively ex- L/PR: N/UI: N/S: U/C: H:
ploited, requires no user interaction or privilege esca- K/A: L
lation, and has a significant impact to confidentiality
and integrity but not to availability. Which of the fol-
lowing CVE metrics would be most accurate for this
zero-day threat?
A. CVSS: 31/AV: N/AC: L/PR: N/UI: N/S: U/C: H: K/A: L
B. CVSS:31/AV:K/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:L
C. CVSS:31/AV:N/AC:L/PR:N/UI:H/S:U/C:L/I:N/A:H
D. CVSS:31/AV:L/AC:L/PR:R/UI:R/S:U/C:H/I:L/A:H
2. Question 2 D. DLP
Which of the following tools would work best to pre-
vent the exposure of PII outside of an organization?
A. PAM
B. IDS
C. PKI
D. DLP
3. C. Configure an Access-Control-Allow-Origin header to Question 3
authorized domains An organization conduct-
ed a web application
vulnerability assessment
against the corporate
website, and the following
output was observed:
Which of the following
tuning recommendations
should the security analyst
share?
, A. Set an HttpOnlvflaq to
force communication by
HTTPS
B. Block requests with-
out an X-Frame-Options
header
C. Configure
an Access-Control-Al-
low-Origin header to au-
thorized domains
D. Disable the cross-origin
resource sharing header
4. Question 4 D. Affected hosts
Which of the following items should be included in a E. Risk score
vulnerability scan report? (Choose two.)
A. Lessons learned
B. Service-level agreement
C. Playbook
D. Affected hosts
E. Risk score
F. Education plan
5. Question 5 A. A mean time to remedi-
The Chief Executive Officer of an organization recently ate of 30 days
heard that exploitation of new attacks in the industry
was happening approximately 45 days after a patch
, was released. Which of the following would best pro-
tect this organization?
A. A mean time to remediate of 30 days
B. A mean time to detect of 45 days
C. A mean time to respond of 15 days
D. Third-party application testing
6. Question 7 B. An on-path attack is be-
company's user accounts have been compromised. ing performed by some-
Users are also reporting that the company's internal one with internal access
portal is sometimes only accessible through HTTP, that forces users into port
other times; it is accessible through HTTPS. Which 80
of the following most likely describes the observed
activity?
A. There is an issue with the SSL certificate causinq
port 443 to become unavailable for HTTPS access
B. An on-path attack is being performed by someone
with internal access that forces users into port 80
C. The web server cannot handle an increasing
amount of HTTPS requests so it forwards users to port
80
D. An error was caused by BGP due to new rules ap-
plied over the company's internal routers
7. A. PowerShel Question 6
A security analyst recent-
ly joined the team and is
trying to determine which
scripting language is be-
ing used in a production
script to determine if it is
malicious. Given the fol-
, lowing script:
Which of the following
scripting languages was
used in the script?
A. PowerShel
B. Ruby
C. Python
D. Shell script
8. Question 8 B. Name: CAP.SHIELD
A security analyst is tasked with prioritizing vulnerabil- -CVSS
ities for remediation. The relevant company security 3.1/AV:N/AC:L/PR:N/UI:N/S:
policies are shown below: External System
Security Policy 1006: Vulnerability Management
1. The Company shall use the CVSSv3.1 Base Score
Metrics (Exploitability and Impact) to prioritize the re-
mediation of security vulnerabilities.
2. In situations where a choice must be made between
confidentiality and availability, the Company shall pri-
oritize confidentiality of data over availability of sys-
tems and data.
3. The Company shall prioritize patching of publicly
available systems and services over patching of inter-
nally available system.
According to the security policy, which of the follow-
ing vulnerabilities should be the highest priority to
patch?
A. Name: THOR.HAMMER
1. Question 1 A. CVSS: 31/AV: N/AC:
A recent zero-day vulnerability is being actively ex- L/PR: N/UI: N/S: U/C: H:
ploited, requires no user interaction or privilege esca- K/A: L
lation, and has a significant impact to confidentiality
and integrity but not to availability. Which of the fol-
lowing CVE metrics would be most accurate for this
zero-day threat?
A. CVSS: 31/AV: N/AC: L/PR: N/UI: N/S: U/C: H: K/A: L
B. CVSS:31/AV:K/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:L
C. CVSS:31/AV:N/AC:L/PR:N/UI:H/S:U/C:L/I:N/A:H
D. CVSS:31/AV:L/AC:L/PR:R/UI:R/S:U/C:H/I:L/A:H
2. Question 2 D. DLP
Which of the following tools would work best to pre-
vent the exposure of PII outside of an organization?
A. PAM
B. IDS
C. PKI
D. DLP
3. C. Configure an Access-Control-Allow-Origin header to Question 3
authorized domains An organization conduct-
ed a web application
vulnerability assessment
against the corporate
website, and the following
output was observed:
Which of the following
tuning recommendations
should the security analyst
share?
, A. Set an HttpOnlvflaq to
force communication by
HTTPS
B. Block requests with-
out an X-Frame-Options
header
C. Configure
an Access-Control-Al-
low-Origin header to au-
thorized domains
D. Disable the cross-origin
resource sharing header
4. Question 4 D. Affected hosts
Which of the following items should be included in a E. Risk score
vulnerability scan report? (Choose two.)
A. Lessons learned
B. Service-level agreement
C. Playbook
D. Affected hosts
E. Risk score
F. Education plan
5. Question 5 A. A mean time to remedi-
The Chief Executive Officer of an organization recently ate of 30 days
heard that exploitation of new attacks in the industry
was happening approximately 45 days after a patch
, was released. Which of the following would best pro-
tect this organization?
A. A mean time to remediate of 30 days
B. A mean time to detect of 45 days
C. A mean time to respond of 15 days
D. Third-party application testing
6. Question 7 B. An on-path attack is be-
company's user accounts have been compromised. ing performed by some-
Users are also reporting that the company's internal one with internal access
portal is sometimes only accessible through HTTP, that forces users into port
other times; it is accessible through HTTPS. Which 80
of the following most likely describes the observed
activity?
A. There is an issue with the SSL certificate causinq
port 443 to become unavailable for HTTPS access
B. An on-path attack is being performed by someone
with internal access that forces users into port 80
C. The web server cannot handle an increasing
amount of HTTPS requests so it forwards users to port
80
D. An error was caused by BGP due to new rules ap-
plied over the company's internal routers
7. A. PowerShel Question 6
A security analyst recent-
ly joined the team and is
trying to determine which
scripting language is be-
ing used in a production
script to determine if it is
malicious. Given the fol-
, lowing script:
Which of the following
scripting languages was
used in the script?
A. PowerShel
B. Ruby
C. Python
D. Shell script
8. Question 8 B. Name: CAP.SHIELD
A security analyst is tasked with prioritizing vulnerabil- -CVSS
ities for remediation. The relevant company security 3.1/AV:N/AC:L/PR:N/UI:N/S:
policies are shown below: External System
Security Policy 1006: Vulnerability Management
1. The Company shall use the CVSSv3.1 Base Score
Metrics (Exploitability and Impact) to prioritize the re-
mediation of security vulnerabilities.
2. In situations where a choice must be made between
confidentiality and availability, the Company shall pri-
oritize confidentiality of data over availability of sys-
tems and data.
3. The Company shall prioritize patching of publicly
available systems and services over patching of inter-
nally available system.
According to the security policy, which of the follow-
ing vulnerabilities should be the highest priority to
patch?
A. Name: THOR.HAMMER
