CS0-003無料問題集「CompTIA Cybersecurity Analyst (CySA+) Certification」

質問 1

An incident response team receives an alert to start an investigation of an internet outage. The outage is preventing all users in multiple locations from accessing external SaaS resources. The team determines the organization was impacted by a DDoS attack. Which of the following logs should the team review first?

（A）DNS

（B）CDN

（C）Vulnerability scanner

（D）Web server

正解：A 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 2

A development team is preparing to roll out a beta version of a web application and wants to quickly test for vulnerabilities, including SQL injection, path traversal, and cross-site scripting. Which of the following tools would the security team most likely recommend to perform this test?

（A）Nmap

（B）OpenVAS

（C）OWASP ZAP

（D）Has heat

正解：C 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 3

A malicious actor has gained access to an internal network by means of social engineering. The actor does not want to lose access in order to continue the attack. Which of the following best describes the current stage of the Cyber Kill Chain that the threat actor is currently operating in?

（A）Exploitation

（B）Weaponization

（C）Reconnaissance

（D）Delivery

正解：A 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 4

Which of the following evidence collection methods is most likely to be acceptable in court cases?

（A）Providing a bit-level image of the hard drive

（B）Creating a file-level archive of all files

（C）Providing a full system backup inventory

（D）Copying all access files at the time of the incident

正解：A 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 5

Using open-source intelligence gathered from technical forums, a threat actor compiles and tests a malicious downloader to ensure it will not be detected by the victim organization's endpoint security protections. Which of the following stages of the Cyber Kill Chain best aligns with the threat actor's actions?

（A）Exploitation

（B）Reconnaissance

（C）Delivery

（D）Weaponizatign

正解：D 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 6

An employee is no longer able to log in to an account after updating a browser. The employee usually has several tabs open in the browser. Which of the following attacks was most likely performed?

（A）XSS

（B）LFI

（C）CSRF

（D）RFI

正解：C 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 7

A security administrator is tasked with modifying the vulnerability scan process to reduce the network traffic but maintain thorough checks. Which of the following scanning approaches should be implemented?

（A）Agent-based scans

（B）Individual scans

（C）Credentialed scans

（D）Security baseline scans

正解：A 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 8

A technician identifies a vulnerability on a server and applies a software patch. Which of the following should be the next step in the remediation process?

（A）Implementation

（B）Validation

（C）Rollback

（D）Testing

正解：B 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 9

A security analyst is working on a server patch management policy that will allow the infrastructure team to be informed more quickly about new patches. Which of the following would most likely be required by the infrastructure team so that vulnerabilities can be remediated quickly? (Select two).

（A）loCs

（B）Hostname

（C）npm identifier

（D）Missing KPI

（E）CVE details

（F）POC availability

正解：A、E 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 10

A Chief Information Security Officer wants to lock down the users' ability to change applications that are installed on their Windows systems. Which of the following is the best enterprise-level solution?

（A）Registry

（B）HIPS

（C）GPO

（D）DLP

正解：C 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 11

Which of the following attributes is part of the Diamond Model of Intrusion Analysis?

（A）Command and control

（B）Weaponization

（C）Delivery

（D）Capability

正解：D 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 12

During an incident, some loCs of possible ransomware contamination were found in a group of servers in a segment of the network. Which of the following steps should be taken next?

（A）Reimaging

（B）Isolation

（C）Remediation

（D）Preservation

正解：B 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 13

During normal security monitoring activities, the following activity was observed:
cd C:\Users\Documents\HR\Employees
takeown/f .*
SUCCESS:
Which of the following best describes the potentially malicious activity observed?

（A）Data exfiltration

（B）File configuration changes

（C）Registry changes or anomalies

（D）Unauthorized privileges

正解：D 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

CS0-003 無料問題集「CompTIA Cybersecurity Analyst (CySA+) Certification」

弊社を連絡する

関連リンク

トップ試験