CompTIA CySA+ Practice Questions 2021

With 3 practice exams, each of which is timed at 200 minutes with a 120 questions , just like the official certification exam

Topics: CompTIA CySA+ domains studied under this certification

1. Threat and Vulnerability Management 22%

2. Software and Systems Security 18%

3. Security Operations and Monitoring 25%

4. Incident Response 22%

5. Compliance and Assessment 13%

Total Questions Count: 360

Exams Count: 3

Length of exam: 200 minutes

Number of questions: 120

Exam language availability: English

Passing grade: 70%

Questions:

Which of the following are essential components within the rules of engagement for a penetration test? (Select TWO).

A) Payment terms

B) Schedule

C) Authorization

D) Business justification List of system administrators

A recent vulnerability scan found four vulnerabilities on an organizations public Internet-facing IP addresses. Prioritizing in order to reduce the risk of a breach to theorganization, which of the following should be remediated FIRST?

A)A website using a self-signed SSL certificate.

B) An HTTP response that reveals an internal IP address.

C) A buffer overflow that allows remote code execution.

D) A cipher that is known to be cryptographically weak.

A security administrator determines several months after the first instance that a local privileged user has been routinely logging into a server interactively as rootand browsing the Internet. The administrator determines this by performing an annual review of the security logs on that server. For which of the following securityarchitecture areas should the administrator recommend review and modification? (Select TWO).

A) Password complexity

B)Software assurance

C) Log aggregation and analysis

D) Acceptable use policies

E) Network isolation and separation

F) Encryption