CompTIA CySA+ Practice Test

1. Which vulnerability management process involves prioritizing remediation efforts based on asset value and threat severity?

Patch management

Risk prioritization

Compliance scanning

Asset enumeration

2. What is the primary purpose of security information and event management (SIEM) systems?

Encrypting network traffic

Collecting and analyzing security logs from multiple sources

Authenticating user identities

Preventing malware infections

3. In threat modeling, which framework uses the acronym STRIDE?

Spoofing, Tampering, Repudiation, Information Disclosure, Denial of Service, Elevation of Privilege

Security, Threat, Risk, Identification, Detection, Evaluation

System, Technology, Requirements, Infrastructure, Design, Environment

Scanning, Testing, Reporting, Inspection, Documentation, Enumeration

4. Which type of scan actively probes systems for open ports and services without exploiting vulnerabilities?

Passive reconnaissance

Port scanning

Penetration testing

Compliance audit

5. What does the CVSS score primarily measure in vulnerability assessment?

The cost of fixing a vulnerability

The severity and exploitability of a vulnerability

The number of affected systems

The time required for patch development

6. During incident response, the containment phase focuses on which primary goal?

Restoring systems to normal operations

Stopping the attack and limiting damage

Documenting the incident timeline

Prosecuting the attacker

7. Which security control type is designed to prevent unauthorized access before an incident occurs?

Detective control

Preventive control

Corrective control

Compensating control

8. What is the primary advantage of using threat intelligence feeds in security operations?

They eliminate all security risks

They provide real-time indicators of compromise and emerging threats

They guarantee system uptime

They reduce encryption overhead

9. In network security, what does a honeypot primarily serve to do?

Encrypt sensitive data

Detect and analyze attacker behavior

Authenticate user credentials

Monitor bandwidth usage

10. Which vulnerability scanning tool is commonly used to assess network security posture?

Nessus

Burp Suite

Metasploit

Wireshark

11. What is the purpose of a security baseline in configuration management?

To track incident response times

To establish a minimum acceptable security standard for systems

To measure network latency

To calculate annual security budgets

12. In the context of CySA+, what does 'defense in depth' mean?

Using only one strong security tool

Implementing multiple layers of security controls

Focusing security efforts on the network perimeter

Regularly changing all passwords

13. Which log type is most critical for detecting unauthorized access attempts?

Application logs

Authentication and access logs

Printer logs

Database performance logs

14. What is the primary goal of vulnerability remediation prioritization?

Fixing all vulnerabilities simultaneously

Addressing the highest-risk vulnerabilities first with available resources

Waiting until all patches are released

Ignoring low-severity vulnerabilities

15. In security operations, which metric measures the time required to detect and respond to a security incident?

Mean time to recovery (MTTR)

Mean time to detect (MTTD)

Mean time between failures (MTBF)

Recovery time objective (RTO)