CompTIA CySA+ Study Guide, 3rd Edition

Chapter 3Malicious Activity

THE COMPTIA CYBERSECURITY ANALYST EXAM OBJECTIVES COVERED IN THIS CHAPTER INCLUDE:

• Domain 1.0: Security Operations
  • 1.2 Given a scenario, analyze indicators of potentially malicious activity
  • 1.3 Given a scenario, use appropriate tools or techniques to determine malicious activity

Responding to security incidents and network events is a common task for cybersecurity analysts, and to do so, you need to know how to recognize common indicators of compromise. Network problems such as excessive or suspicious bandwidth consumption, probes and scans, and rogue devices are all likely to be encountered by security professionals and can indicate problems. Host and application issues are also frequently part of ...