CompTIA CySA+ (CS0-002) — Question 413

A security analyst is correlating, ranking, and enriching raw data into a report that will be interpreted by humans or machines to draw conclusions and create actionable recommendations. Which of the following steps in the intelligence cycle is the security analyst performing?

Answer options

• A. Analysis and production
• B. Processing and exploitation
• C. Dissemination and evaluation
• D. Data collection
• E. Planning and direction

Correct answer: A

Explanation

The correct answer is A, Analysis and production, as this step involves interpreting and enriching data to generate reports. The other options refer to different stages of the intelligence cycle such as gathering data (D), distributing information (C), or the initial planning stage (E), which do not specifically relate to the analyst's task of report creation.