CompTIA CySA+ Practice Tests, 3rd Edition

AppendixAnswers and Explanations

Chapter 1: Domain 1.0: Security Operations

1. B. Open-source intelligence is freely available information that does not require a subscription fee. Closed-source and proprietary intelligence are synonyms and do involve payments to the providers. Vulnerability feeds may be considered threat intelligence, but they normally come with subscription fees.
2. D. An intelligence source that results in false positive errors is lacking in accuracy because it is providing incorrect results to the organization. Those results may still be timely and relevant, but they are not correct. Expense is not one of the three intelligence criteria.
3. B. It is possible for any of these threat actors to be affiliated with an APT, but the ...