Cysa ports 1 - Study guides, Class notes & Summaries

CYSA+ PORTS NEEDED TO KNOW (1)

Page 1 of 21 COMPTIA CYSA+ (CS0-002) PRACTICE EXAM 1| QUESTIONS & ANSWERS (VERIFIED) | LATEST UPDATE | GRADED A+ A cybersecurity analyst reviews the logs of a proxy server and saw the following URL, about the results of this search? A. Returns no useful results for an attacker B. Returns all web pages containing an email address affiliated with C.Returns all web pages hosted at D. Returns all web pages containing the text Correct Answer: B. Returns all web pages containing an ...

CySA+ Exam guide verified 2022DNS Sinkhole Provide a response to a DNS query that does not resolve the IP address.. Instead targets the addresses for known malicious domains Role-Based access control (RBAC) grants permissions based on a user's role or group. Reverse Engineering the process of decontructing something in order to discover its features and constituents Banner grabbing used to gain information about a computer system on a network and the services running o...

CYSA Exam 2 QUESTION AND CORRECT ANSWERS Ty is reviewing the scan report for a Windows system joined to his organization's domain and finds the vulnerability shown here. What should be Ty's most significant concern related to this vulnerability? Window shows sections for 3 administrator account's password does not expire and threat, and options for first detected, last detected, vendor reference, user modified, et cetera. The presence of this vulnerability indicates that an at...

CySA+ Practice Tests: Ch. 1 Domain 1: Threat Management 1-20 correct answers 20221. Charles wants to use active discovery techniques as part of his reconnaissance efforts. Which of the following techniques fits his criteria? A. Google searching B. Using a Shodan search C. Using DNS reverse lookup D. Querying a PGP key server C. DNS reverse lookup is an active technique. Google and Shodan are both search engines, while a PGP key server does not interact with the target site and is considered...

CySA+ Exam guide Questions and Answers Rated A DNS Sinkhole Provide a response to a DNS query that does not resolve the IP address.. Instead targets the addresses for known malicious domains Role-Based access control (RBAC) grants permissions based on a user's role or group. Reverse Engineering the process of decontructing something in order to discover its features and constituents Banner grabbing used to gain information about a computer system on a network and the services running on its ...

(Jason Dion's) CySA+ Practice Exam 1 correctly answered 2022You suspect that a service called on a Windows server is malicious and you need to terminate it. Which of the following tools would NOT be able to terminate it? ​ A.sc ​ B.wmic ​ C. ​ D. C. Explanation OBJ-3.1: The security policy auditor () will allow an authorized administrator the option to change a great deal about an operating system, but it cannot explicitly stop a process or service that is already running....

CySA Practice Exam #6 questions correctly answered 2022A, B, C, F. The last phase is the actions on objectives phase. During this phase, the targeted network is now adequately controlled by the attacker. If the system or network owner does not detect the attacker, the adversary may persist for months while gaining progressively deeper footholds into the network. This is done through privilege escalation and lateral movement. Additionally, the attacker can now exfiltrate data from the network ...

Cysa Questions and Answers Rated A CVSS: Low Under 4.0 CVSS: Medium More than 4.0,but less than 6.0 CVSS: High More than 6.0, but less than 10.0 CVSS: Critical 1.0 NIST Threat Classification External/Removable media Attrition (Brute force) Web Email Impersonation Improper usage Loss or theft of equipment Unknown NIST Functional Impact None - No effect on org's ability to provide services to all users Low - Minimal effect; the org can still provide all services to all users but, has lost e...

CYSA Exam 2 QUESTION AND CORRECT ANSWERS Ty is reviewing the scan report for a Windows system joined to his organization's domain and finds the vulnerability shown here. What should be Ty's most significant concern related to this vulnerability? Window shows sections for 3 administrator account's password does not expire and threat, and options for first detected, last detected, vendor reference, user modified, et cetera. The presence of this vulnerability indicates that an at...