CySA+ Fast Track Exam Preparation + Question Bank +SOS Tips™

Learn how the CIA triad—confidentiality, integrity, and availability—drives threat management, defense in depth, and the deployment of security controls to protect information and systems.

Identify the relationship between threats, abilities, and risks, and use risk analysis to implement controls that protect availability and data.

Identify internal and external threats during risk assessment, including malware, spam, government-sponsored advanced persistent threats, natural disasters, disgruntled insiders, and incompetent administrators.

Identify vulnerabilities that threats may exploit to compromise confidentiality, integrity, or availability, and qualitative risk assessments use high, medium, and low ratings with likelihood and impact to determine risk rating.

Explore how network access control (NAC) secures organizations by authenticating devices with a supplicant, authenticating users via a server, and using in-band or out-of-band NAC solutions, including captive portals.

Explore firewall and network perimeter security, including DMZ concepts, ACL-based rule bases, and traffic filtering by ports, with packet-filtering, stateful inspection, NGFWs, and WAFs.

Hardening system configurations reduces attacker access by disabling unnecessary services and enforcing secure settings, while patch management, group policy, and endpoint security software provide centralized, enterprise-wide protection and monitoring.

Penetration testing simulates attacker techniques to test security controls and report findings to management. It follows planning, discovery, attack, and reporting, with clear engagement rules.

Master reverse engineering by decomposing a finished product to its components, revealing hardware and software inner workings. Learn sandboxing as a behavior-based approach to detect malware without relying on signatures.

Learn active reconnaissance and intelligence gathering using port scanning and network discovery to analyze topology, services, and potential exposure with tools like Nmap and Zenmap.

Explore vulnerability management platforms with built-in scanning and learn how passive footprinting gathers data from logs, config files, DNS, and public queries without active probes.

Analyze passive footprinting by examining local configuration data, logs, and network device configurations to map system interactions. Use net flow and net start to reveal traffic flows and connections.

Gather organizational intelligence by collecting data on location, charts, financials, relationships, and staff, using electronic data harvesting, social media analysis, and social engineering to inform security assessments.

Direct reconnaissance detection by capturing evidence, monitoring connections between network zones, and correlating data with IDS, IPS, and SIEM to prevent and respond to attacks.

Vulnerability scanning requirements come from internal policies and external regulations such as PCI DSS and FISMA, while HIPAA and GLBA govern sensitive data and mandate a vulnerability management program.

Identify scan targets from discovery scans and organizational criteria, determine systems for vulnerability scans based on data classification and exposure, and use automated tools to build an asset inventory.

Set scan frequency to meet organizational needs, from daily to monthly, or continuous monitoring, using automated scans with credentialed options and templates for cloud, network, and devices.

Balance risk appetite, regulatory requirements like PCI DSS, and technical constraints when maintaining vulnerability scanners. Start small and gradually expand scan frequency, updating software and definitions to stay current.

Automate remediation workflows within vulnerability management to detect, remediate, and test vulnerabilities, prioritizing by system criticality, remediation difficulty, severity, and exposure, with integrated reporting and tracking.