CompTIA CySA+ — Information & Free Practice

US · Examination information

200 free questions · Answer explanations · No signup required

CompTIA CySA+

Examination outline

Security Operations (34%)
- Explain concepts related to system and network architecture in security operations.
- Given a scenario, analyze indicators of potential malicious activity.
- Given a scenario, use tools to determine malicious activity.
- Explain threat intelligence and threat-hunting concepts.
- Explain the importance of efficiency and process improvement in security operations.
- Summarize concepts related to the use of AI in security operations.
Vulnerability Management (26%)
- Given a scenario, implement the appropriate vulnerability scanning method.
- Given a scenario, analyze output from vulnerability assessment tools.
- Given a scenario, analyze data to prioritize and mitigate vulnerabilities.
- Explain concepts related to control types, risks, and vulnerability management.
Incident Response and Management (24%)
- Summarize concepts related to attack methodology frameworks.
- Summarize the incident response process.
- Given a scenario, implement incident response techniques.
Reporting and Communication (16%)
- Explain the importance of vulnerability management reporting and communication.
- Explain the importance of security operations and incident response reporting and communication.

Examination sources

This examination may be required or accepted as an alternative, depending on the license and application pathway.