CySA Exam Questions and Answers
Already Graded A
Which one of the following objectives is not one of the three main objectives that information
security professionals must achieve to protect their organizations agains
...
CySA Exam Questions and Answers
Already Graded A
Which one of the following objectives is not one of the three main objectives that information
security professionals must achieve to protect their organizations against cybersecurity threats?
✔✔nonrepudiation
Tommy is assessing the security database servers in his datacenter and realizes that one of them is
missing a critical Oracle security patch. What type of situation has Tommy detected?
✔✔vulnerability
Ben is preparing to conduct a cybersecurity risk assessment for his organization. If he chooses to
follow the standard process proposed by NIST, which one of the following steps would come first?
✔✔Identify threats
Cindy is conducting a cybersecurity risk assessment and is considering the impact that a failure of
her city's power grid might have on the organization. What type of threat is she considering?
✔✔environmental
Which one of the following categories of threat requires that cybersecurity analysts consider the
capability, intent and targeting of the threat source? ✔✔adversarial
Vincent is responding to a security incident that compromised one of his organization's web
servers. He does not believe that the attackers modified or stole any information, but they did
disrupt access to the organization's website. What cybersecurity objective did this attack violate?
✔✔availability
Which one of the following is an example of an operational security control? ✔✔penetration tests
Encryption software, network firewalls, and antivirus software are all examples of
_________________ security controls. ✔✔technical
Paul recently completed a risk assessment and determined that his network was vulnerable to
hackers connecting to open ports on servers. He implemented a network firewall to reduce the
likelihood of a successful attack. What risk management strategy did Paul choose to pursue?
✔✔risk mitigation
Robert's organization has a BYOD policy, and he would like to ensure that devices connected to
the network under this policy have current antivirus software. What technology can best assist him
with this goal? ✔✔network access control
When performing 802.1x authentication, what protocol does the authenticator use to communicate
with the authentication server? ✔✔RADIUS
Juan is configuring a new device that will join his organization's wireless network. The wireless
network uses 802.1x authentication. What type of agent must be running on the device for it to
join this network? ✔✔802.1x supplicant
Rick is preparing a firewall rule that will allow network traffic from external systems to a web
server running the HTTPS protocol. What
[Show More]
.png)
