Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
CompTIA CySA+ Cybersecurity Analyst · CompTIA
Select one answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
you need to identify the attack pattern before you select a framework, escalate, or take disruptive containment actions.
Analyzing web logs with odd characters often points to a potential injection attack, like SQL injection or cross-site scripting (XSS). Before escalating, it's important to identify the nature of the attack — this helps determine the severity and the proper response. Jumping to actions like shutdowns (A) or law enforcement notification (D) is premature without confirming what’s going on. While C (using a framework like MITRE ATT&CK or the NIST IR process) is a good long-term step, it comes after initial triage and identification.
B is part of C. Also, this sounds like fuzzing.