CompTIA CySA+ (CS0-003) Free Practice Exam Questions

444 real CompTIA CySA+ (CS0-003) exam questions with answers and AI explanations. CompTIA certification prep — page 43 of 45.

1. Question 496: The Chief Information Security Officer wants to eliminate and reduce shadow IT in the enterprise. Several high-risk cloud applications are used that increase t…
2. Question 497: An analyst finds that an IP address outside of the company network that is being used to run network and vulnerability scans across external-facing assets. Whi…
3. Question 498: An organization has deployed a cloud-based storage system for shared data that is in phase two of the data life cycle. Which of the following controls should t…
4. Question 499: An organization's threat intelligence team notes a recent trend in adversary privilege escalation procedures. Multiple threat groups have been observed utilizi…
5. Question 501: A security alert was triggered when an end user tried to access a website that is not allowed per organizational policy. Since the action is considered a termi…
6. Question 502: Which of the following is the first step that should be performed when establishing a disaster recovery plan?
7. Question 503: A technician identifies a vulnerability on a server and applies a software patch. Which of the following should be the next step in the remediation process?
8. Question 505: A security program was able to achieve a 30% improvement in MTTR by integrating security controls into a SIEM. The analyst no longer had to jump between tools.…
9. Question 507: When starting an investigation, which of the following must be done first?
10. Question 508: Which of the following describes how a CSIRT lead determines who should be communicated with and when during a security incident?