CompTIA CS0-004 Exam Syllabus Topics:
| Section | Weight | Objectives |
|---|---|---|
| Topic 1: Vulnerability Management | 26% | - Vulnerability Assessment and Remediation
|
| Topic 2: Reporting and Communication | 16% | - Documentation and Stakeholder Communication
|
| Topic 3: Incident Response and Management | 24% | - Incident Handling and Investigation
|
| Topic 4: Security Operations | 34% | - Security Monitoring and Analysis
|
CompTIA Cybersecurity Analyst (CySA+) Certification Sample Questions:
Question #1
Law enforcement subpoenas a company in order to obtain all records related to the activities a threat actor performed using the IP address 154.21.154.21. Which of the following should an analyst perform first?
A. Chain of custody
B. Data acquisition
C. Hash verification
D. Legal hold
Question #2
During a security incident at a healthcare facility, an unauthorized user downloads multiple patients' PHI records. Which of the following is the best reason for the healthcare facility to communicate with the affected patients regarding the incident?
A. To meet regulatory requirements
B. To appease the stakeholders
C. To get support from law enforcement
D. To avoid legal liability
Question #3
A security analyst is investigating an unusually high volume of requests received on a web server.
Based on the following command and output:
Which of the following best describes the activity that the analyst will confirm?
A. SQL injection
B. Directory brute force
C. Remote command execution
D. Cross-site scripting
Question #4
As part of a quality assurance test, a developer wants to examine how the code behaves after an application has been fully compiled and is running. Which of the following best describes the type of testing that the developer should perform?
A. Black box
B. Static
C. Dynamic
D. Diagnostic
Question #5
Which of the following best explains the purpose of the Pyramid of Pain in threat intelligence?
A. To measure how much operational damage a threat actor can cause before detection occurs
B. To compare open-source intelligence (OSINT) with closed-source intelligence based on collection cost
C. To organize attack activity into categories such as spoofing, tampering, and repudiation
D. To show that changing to different types of indicators and behaviors is difficult for an adversary
Solutions:
| Question #1 Correct Answer: D | Question #2 Correct Answer: A | Question #3 Correct Answer: B | Question #4 Correct Answer: C | Question #5 Correct Answer: D |
1256 Customer Reviews
Quality and ValueITCertKing Practice Exams are written to the highest standards of technical accuracy, using only certified subject matter experts and published authors for development - no all study materials.
Tested and ApprovedWe are committed to the process of vendor and third party approvals. We believe professionals and executives alike deserve the confidence of quality coverage these authorizations provide.
Easy to PassIf you prepare for the exams using our ITCertKing testing engine, It is easy to succeed for all certifications in the first attempt. You don't have to deal with all dumps or any free torrent / rapidshare all stuff.
Try Before BuyITCertKing offers free demo of each product. You can check out the interface, question quality and usability of our practice exams before you decide to buy.
