최신 CS0-004 무료덤프 - CompTIA Cybersecurity Analyst (CySA+) Certification
An analyst receives an alert that a user clicked on a malicious link. The analyst verifies that the link is malicious and was intended to capture credentials. The analyst verifies that the user visited the website, but no evidence indicates that the credentials were used. The analyst recommends that the user take remedial training and closes the case.
Which of the following steps in the incident response process did the analyst neglect?
Which of the following steps in the incident response process did the analyst neglect?
정답: C
설명: (DumpTOP 회원만 볼 수 있음)
An analyst reviews the following log entries:
Which of the following conclusions should the analyst reach? (Choose two.)
Which of the following conclusions should the analyst reach? (Choose two.)
정답: A,D
설명: (DumpTOP 회원만 볼 수 있음)
Which of the following is the most important component to include in the preparation phase of an incident response plan?
정답: D
설명: (DumpTOP 회원만 볼 수 있음)
An analyst executes the top command on a Linux system for an unresponsive application and observes the following output:
Which of the following is the most likely cause of this issue?
Which of the following is the most likely cause of this issue?
정답: C
설명: (DumpTOP 회원만 볼 수 있음)
An analyst is configuring a security information and event management system to capture fileless malware execution events.
Which of the following log files requires additional configuration to accomplish this task?
Which of the following log files requires additional configuration to accomplish this task?
정답: A
설명: (DumpTOP 회원만 볼 수 있음)
A security operations center (SOC) analyst investigates the results of a password spray test conducted by the vulnerability management team.
The analyst must:
Identify Linux systems that have successful and unsuccessful logins with username "User1".
Create an output report named "linux-events" of all the events to a flat file.
The analyst issues the following console command:
ls /var/log/
The shortened output of the command is below:
Which of the following commands should the analyst use to meet the report output requirements?
The analyst must:
Identify Linux systems that have successful and unsuccessful logins with username "User1".
Create an output report named "linux-events" of all the events to a flat file.
The analyst issues the following console command:
ls /var/log/
The shortened output of the command is below:
Which of the following commands should the analyst use to meet the report output requirements?
정답: D
설명: (DumpTOP 회원만 볼 수 있음)
Despite removing malware from some of the affected hosts, several of an organization's internal resources are still unavailable two weeks after the discovery of a major incident.
Which of the following best describes this phase?
Which of the following best describes this phase?
정답: A
설명: (DumpTOP 회원만 볼 수 있음)
A Chief Information Security Officer (CISO) evaluates a threat heat map and notices a substantial increase in custom scanning and enumeration activities. The CISO wants to gather as much information as possible about the activities targeting the company to help prioritize mitigations.
Which of the following solutions is the best way to accomplish this goal?
Which of the following solutions is the best way to accomplish this goal?
정답: B
설명: (DumpTOP 회원만 볼 수 있음)
Which of the following is the most important reason why tactics, techniques, and procedures (TTP) are beneficial to a defensive strategy?
정답: B
설명: (DumpTOP 회원만 볼 수 있음)