CompTIA CySA+ Practice Tests, 3rd Edition

Chapter 5Practice Test 1

1. While reviewing network flow logs, John sees that network flow on a particular segment suddenly dropped to zero. What is the most likely cause of this?
   1. A denial-of-service attack
   2. A link failure
   3. High bandwidth consumption
   4. Beaconing
2. Saanvi is conducting the recovery process after his organization experienced a security incident. During that process, he plans to apply patches to all of the systems in his environment. Which one of the following should be his highest priority for patching?
   1. Windows systems
   2. Systems involved in the incident
   3. Linux systems
   4. Web servers
3. Susan's organization suffered from a major breach that was attributed to an advanced persistent threat (APT) that used exploits of zero-day vulnerabilities ...