CySA+ 1 Study Notes

Question 1

1) Notify vendor of vulnerability
2) Provide vendor reasonable time to create patch
3) Disclose vulnerability publicly

Answer 1

Process when discovering new vulnerabilties :

Question 2

1) Develop list of threats
2) Assess threats based on likelihood
3) Assess threats based on impact
4) Create Threat register

Answer 2

Threat Analysis :

Question 3

set of activities an org. takes to educate itself about changes in cybersecurity threat landscape and adapt security controls based on that info.

security websites, news media, social media, govt. sponsored security analysis centers, security researchers, etc …

Answer 3

Threat Intelligence / Open-Source intelligence

Question 4

search web for valid email addresses at targets domain and use those addresses to send out phishing attacks …

Answer 4

Email Harvesting

Question 5

??? how promptly is threat intelligence delivered?

??? is data correct?

??? is the provider consistent ?

Answer 5

Timeliness / Accuracy / Reliability

Question 6

(1) Requirements : determines needed info.
(2) Collection : gathers info meetings requirements.
(3) Analysis : Creates intelligence from info.
(4) Dissemination : shares analyzed intelligence.
(5) Feedback : identifies improvements.

Answer 6

Intelligence Cycle

Question 7

??? standard language used to communicate security info between systems and org.’s.

??? set of services that share security info between systems and org.’s, provides technical framework for providing messages written in STIX language.

??? describes and shares security threat info.

Answer 7

STIX / TAXII / OpenIOC

Question 8

bring together cybersecurity teams from competing org.’s to help share industry info in a confidential way.

Answer 8

ISAC

Question 9

??? identify potentially malicious actors based on their use of IP address, email address, domains, etc that were previously used in attacks.

??? identify potentially malicious actors based upon similarity of their behaviors to past attackers.

Answer 9

Reputational Threat Research / Behavioral Threat Research

Question 10

??? use asset inventory as basis for analysis.

??? identify how specific threats may affect each info system.

??? identify impact of various threats on a specific service.

Answer 10

Asset Focus / Threat Focus / Service Focus