CompTIA CySA+ Study Guide Exam CS0-002, 2nd Edition

Appendix BAnswers to Review Questions and Practice Exam

Chapter 1: Today's Cybersecurity Analyst

1. B. The three primary objectives of cybersecurity professionals are confidentiality, integrity, and availability.
2. B. In this scenario, Tommy identified a deficiency in the security of his web server that renders it vulnerable to attack. This is a security vulnerability. Tommy has not yet identified a specific risk because he has not identified a threat (such as a hacker) that might exploit this vulnerability.
3. C. The NIST risk assessment process says that organizations should identify threats before identifying vulnerabilities or determining the likelihood and impact of risks.
4. D. Widespread infrastructure failures, such as those affecting the ...