CySA+ topics: vulnerability scan results, remediation, incident phases, forensics evidence handling, communication and reporting.
40 cards · basic cards · AI-written, checked twice. Edit anything.
- What does CVSS stand for?
Show answer
Common Vulnerability Scoring System- CVSS base scores range from what to what?
Show answer
0.0 to 10.0- What CVSS score range indicates a critical vulnerability?
Show answer
9.0 to 10.0- What is a false positive in vulnerability scanning?
Show answer
A scan result reporting a vulnerability that does not actually exist- Name the two main types of vulnerability scans based on authentication level.
Show answer
Authenticated and unauthenticated scans- Why are authenticated vulnerability scans more thorough than unauthenticated ones?
Show answer
They can access protected system files and settings to verify actual misconfigurations and vulnerabilities- What is a baseline vulnerability scan?
Show answer
An initial comprehensive scan used as a reference point to track changes and progress over time- What occurs during the detection phase of incident response?
Show answer
An organization first recognizes and identifies that a security incident is happening- What is the primary goal of the containment phase in incident response?
Show answer
To isolate affected systems and prevent the incident from spreading further- What is the analysis phase in incident response?
Show answer
Investigating the incident to determine its nature, scope, methods used, and impact- What is the eradication phase in incident response?
Show answer
Removing attacker access, malware, and other artifacts from the environment- What is the recovery phase in incident response?
Show answer
Restoring systems and services to normal operations after an incident- What does IRP stand for?
Show answer
Incident Response Plan- What is a CIRT?
Show answer
Computer Incident Response Team, the designated group responsible for handling security incidents- What is chain of custody in forensic evidence handling?
Show answer
The documented record of who possessed evidence, when they held it, and what they did with it
FlashKeepers