CompTIA CySA+ (CS0-003) — Question 178

An analyst is suddenly unable to enrich data from the firewall. However, the other open intelligence feeds continue to work. Which of the following is the most likely reason in the firewall feed stopped working?

Answer options

• A. The firewall service account was locked out.
• B. The firewall was using a paid feed.
• C. The firewall certificate expired.
• D. The firewall failed open.

Correct answer: C

Explanation

The correct answer is C because an expired firewall certificate would prevent the firewall feed from functioning properly, while other feeds remain unaffected. Option A is incorrect because a locked-out service account would typically affect all feeds, not just the firewall. Option B is not relevant as the issue pertains to certificate validity rather than payment status, and option D is incorrect as a failed open state would still allow data to be enriched.