CS0-003 Free Sample Questions

Comptia Cysa+ Practice Test
5/121 questions · Unlock full access
Q1

A recent zero-day vulnerability is being actively exploited, requires no user interaction or privilege escalation, and has a significant impact to confidentiality and integrity but not to availability. Which of the following CVE metrics would be most accurate for this zero-day threat?

Q2

Which of the following tools would work best to prevent the exposure of PII outside of an organization?

Q3

An organization conducted a web application vulnerability assessment against the corporate website, and the following output was observed:Which of the following tuning recommendations should the security analyst share?

Question image
Q4Multiple answers

Which of the following items should be included in a vulnerability scan report? (Choose two.)

Q5

The Chief Executive Officer of an organization recently heard that exploitation of new attacks in the industry was happening approximately 45 days after a patch was released. Which of the following would best protect this organization?