CompTIA CS0-003 Exam Questions
CompTIA CySA+ (CS0-003) (Page 11 )

Updated On: 24-Feb-2026

A security analyst is performing an investigation involving multiple targeted Windows malware binaries. The analyst wants to gather intelligence without disclosing information to the attackers.
Which of the following actions would allow the analyst to achieve the objective?

  1. Upload the binary to an air gapped sandbox for analysis
  2. Send the binaries to the antivirus vendor
  3. Execute the binaries on an environment with internet connectivity
  4. Query the file hashes using VirusTotal

Answer(s): A



Which of the following would help to minimize human engagement and aid in process improvement in security operations?

  1. OSSTMM
  2. SIEM
  3. SOAR
  4. OWASP

Answer(s): C



After conducting a cybersecurity risk assessment for a new software request, a Chief Information Security Officer (CISO) decided the risk score would be too high. The CISO refused the software request.
Which of the following risk management principles did the CISO select?

  1. Avoid
  2. Transfer
  3. Accept
  4. Mitigate

Answer(s): A



Which of the following is an important aspect that should be included in the lessons-learned step after an incident?

  1. Identify any improvements or changes in the incident response plan or procedures
  2. Determine if an internal mistake was made and who did it so they do not repeat the error
  3. Present all legal evidence collected and turn it over to iaw enforcement
  4. Discuss the financial impact of the incident to determine if security controls are well spent

Answer(s): A



The security operations team is required to consolidate several threat intelligence feeds due to redundant tools and portals.
Which of the following will best achieve the goal and maximize results?

  1. Single pane of glass
  2. Single sign-on
  3. Data enrichment
  4. Deduplication

Answer(s): A






Post your Comments and Discuss CompTIA CS0-003 exam dumps with other Community members:

Join the CS0-003 Discussion