CompTIA CySA+ Cybersecurity Analyst Practice Mode

Community Discussion

Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.

• 1

  Answer is D; B is not possible b/c of the last step "Follow up". D is the only choice that requires no human interaction which is the point of this question

• Chose D4

  This task is ideal for automation because it involves consistent, rule‑based checks (phishing score ≥ 5), followed by deterministic actions like blocking the sender’s domain and quarantining the email. These steps require no human judgment, making them perfect for automated SOAR workflows that reduce analyst workload and speed up response.

• Chose B1

  B makes more sense to me but I’ve only been doing this 2 years.