CompTIA CySA+ Cybersecurity Analyst Practice Mode

Community Discussion

Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.

• Chose A4

  It's would be A or D, however, the question says these binaries are "targeted", meaning they are customized for organization and would not be on VirusTotal. Thus, A is the answer. As for gathering intelligence, this can still gathered from a binary, like extracting IoCs with the strings command, etc.

• Chose A8

  An air-gapped sandbox is an isolated environment with no internet connectivity, which allows the analyst to analyze the malware in a controlled manner without any risk of the malware communicating with its command-and-control (C2) servers or alerting the attackers. This setup ensures that the analysis stays private, and no information is leaked to the attackers.

• 1

  A. is the correct answer. While D. is what I do in real life a lot... (possibly all the time). you really need to give this some thought. or not. question says, analyst is trying to keep this from the threat actors. air-gapped sand box is disconnected from the internet. Threat actors monitor what is being lookup on on VT or talos or any other reputation look up sites.