"CompTIA CySA+ Practice Test - SimeonOnSecurity"

Question 1

"Which term or concept best matches this description: \"a team that monitors and responds to security events\"?"

Accepted Answer

"SOC is best described as a team that monitors and responds to security events. This concept falls under the Security Operations domain."

Question 2

"Within the Security Operations domain, what best describes SOC?"

Accepted Answer

"SOC is correctly described as a team that monitors and responds to security events."

Question 3

"As a security analyst, you encounter something described as \"a team that monitors and responds to security events\". Which term applies?"

Accepted Answer

"SOC is best described as a team that monitors and responds to security events, so it is the correct match here."

Question 4

"Which term or concept best matches this description: \"a tool that aggregates and correlates security logs\"?"

Accepted Answer

"SIEM is best described as a tool that aggregates and correlates security logs. This concept falls under the Security Operations domain."

Question 5

"Within the Security Operations domain, what best describes SIEM?"

Accepted Answer

"SIEM is correctly described as a tool that aggregates and correlates security logs."

Question 6

"As a security analyst, you encounter something described as \"a tool that aggregates and correlates security logs\". Which term applies?"

Accepted Answer

"SIEM is best described as a tool that aggregates and correlates security logs, so it is the correct match here."

Question 7

"Which term or concept best matches this description: \"an artifact that suggests a possible breach\"?"

Accepted Answer

"Indicator of compromise is best described as an artifact that suggests a possible breach. This concept falls under the Security Operations domain."

Question 8

"Within the Security Operations domain, what best describes Indicator of compromise?"

Accepted Answer

"Indicator of compromise is correctly described as an artifact that suggests a possible breach."

Question 9

"As a security analyst, you encounter something described as \"an artifact that suggests a possible breach\". Which term applies?"

Accepted Answer

"Indicator of compromise is best described as an artifact that suggests a possible breach, so it is the correct match here."

Question 10

"Which term or concept best matches this description: \"intelligence about attacker tactics and techniques\"?"

Accepted Answer

"Tactical intelligence is best described as intelligence about attacker tactics and techniques. This concept falls under the Security Operations domain."

Question 11

"Within the Security Operations domain, what best describes Tactical intelligence?"

Accepted Answer

"Tactical intelligence is correctly described as intelligence about attacker tactics and techniques."

Question 12

"As a security analyst, you encounter something described as \"intelligence about attacker tactics and techniques\". Which term applies?"

Accepted Answer

"Tactical intelligence is best described as intelligence about attacker tactics and techniques, so it is the correct match here."

Question 13

"Which term or concept best matches this description: \"intelligence about specific incoming campaigns\"?"

Accepted Answer

"Operational intelligence is best described as intelligence about specific incoming campaigns. This concept falls under the Security Operations domain."

Question 14

"Within the Security Operations domain, what best describes Operational intelligence?"

Accepted Answer

"Operational intelligence is correctly described as intelligence about specific incoming campaigns."

Question 15

"As a security analyst, you encounter something described as \"intelligence about specific incoming campaigns\". Which term applies?"

Accepted Answer

"Operational intelligence is best described as intelligence about specific incoming campaigns, so it is the correct match here."

Question 16

"Which term or concept best matches this description: \"high-level intelligence used for long-term decisions\"?"

Accepted Answer

"Strategic intelligence is best described as high-level intelligence used for long-term decisions. This concept falls under the Security Operations domain."

Question 17

"Within the Security Operations domain, what best describes Strategic intelligence?"

Accepted Answer

"Strategic intelligence is correctly described as high-level intelligence used for long-term decisions."

Question 18

"As a security analyst, you encounter something described as \"high-level intelligence used for long-term decisions\". Which term applies?"

Accepted Answer

"Strategic intelligence is best described as high-level intelligence used for long-term decisions, so it is the correct match here."

Question 19

"Which term or concept best matches this description: \"a catalog of adversary tactics and techniques\"?"

Accepted Answer

"MITRE ATT\u0026CK is best described as a catalog of adversary tactics and techniques. This concept falls under the Security Operations domain."

Question 20

"Within the Security Operations domain, what best describes MITRE ATT\u0026CK?"

Accepted Answer

"MITRE ATT\u0026CK is correctly described as a catalog of adversary tactics and techniques."

Question 21

"As a security analyst, you encounter something described as \"a catalog of adversary tactics and techniques\". Which term applies?"

Accepted Answer

"MITRE ATT\u0026CK is best described as a catalog of adversary tactics and techniques, so it is the correct match here."

Question 22

"Which term or concept best matches this description: \"an analysis model linking adversary, capability, infrastructure, and victim\"?"

Accepted Answer

"Diamond Model is best described as an analysis model linking adversary, capability, infrastructure, and victim. This concept falls under the Security Operations domain."

Question 23

"Within the Security Operations domain, what best describes Diamond Model?"

Accepted Answer

"Diamond Model is correctly described as an analysis model linking adversary, capability, infrastructure, and victim."

Question 24

"As a security analyst, you encounter something described as \"an analysis model linking adversary, capability, infrastructure, and victim\". Which term applies?"

Accepted Answer

"Diamond Model is best described as an analysis model linking adversary, capability, infrastructure, and victim, so it is the correct match here."

Question 25

"Which term or concept best matches this description: \"a staged model of an attack lifecycle\"?"

Accepted Answer

"Cyber Kill Chain is best described as a staged model of an attack lifecycle. This concept falls under the Security Operations domain."

CompTIA CySA+ Practice Test - SimeonOnSecurity

As a security analyst, you encounter something described as "linking related events across multiple sources". Which term applies?