CompTIA CySA+ (CS0-003) Free Practice Exam Questions

444 real CompTIA CySA+ (CS0-003) exam questions with answers and AI explanations. CompTIA certification prep — page 27 of 45.

Question 301: A network security analyst for a large company noticed unusual network activity on a critical system. Which of the following tools should the analyst use to an…
Question 302: A security analyst needs to block vulnerable ports and disable legacy protocols. The analyst has ensured NetBIOS trio, Telnet, SMB, and TFTP are blocked and/or…
Question 303: A junior security analyst opened ports on the company’s firewall, and the company experienced a data breach. Which of the following most likely caused the data…
Question 304: A user is suspected of violating policy by logging in to a Linux VM during non-business hours. Which of the following system files is the best way to track the…
Question 305: Which of the following risk management decisions should be considered after evaluating all other options?
Question 306: A security analyst provides the management team with an after action report for a security incident. Which of the following is the management team most likely…
Question 307: A security analyst is developing a script to filter firewall vulnerabilities. The script will impact the integrity of data hosted on devices connected to netwo…
Question 308: An organization is preparing for a disaster recovery exercise. Which of the following actions should be implemented first?
Question 311: A WAF weekly report shows that a daily spike occurs from the same subnet. An open-source review indicates the IP addresses belong to a legitimate internet serv…
Question 312: An organization has implemented code into a production environment. During a routine test, a penetration tester found that some of the code had a backdoor impl…