1.1 Explain the importance of system and network architecture concepts in security operations.
Objective 1.1 sits in Security Operations, which carries 33% of the CySA+ exam. The questions below are original, written from the official objective title above, and each explanation cites the CompTIA page it rests on.
Objective title verbatim from the official objectives. CompTIA exam page ↗
A worked example
Shown solved, with the whole explanation open: this is what every question here carries.
An analyst configures a syslog relay to forward only messages more important than LOG_ERR. Which level passes the filter?
Correct.
Concept
Syslog severities are an ordered scale, and forwarding filters keyed to importance admit everything at or past a threshold. Reading the scale in the wrong direction turns a filter into silence or noise.
Why D
The scale runs from LOG_EMERG down to LOG_DEBUG in decreasing importance. Only LOG_EMERG, LOG_ALERT, and LOG_CRIT outrank LOG_ERR, so of the levels listed, only the critical level clears the filter.
Now you: objective 1.1 questions
No account needed. The explanation opens when you answer.
Sample question 1 of 3
Which syslog facility is reserved for security and authorization messages that should stay private?
Sample question 2 of 3
During a review, an analyst sees events tagged with the kern facility arriving from an unprivileged user process and suspects tampering. Why is that suspicious?
Sample question 3 of 3
An engineer asks which authentication events the application must record. What do you tell them?
Full CySA+ question bank coming
We’re writing the complete bank from the official objectives right now. Leave your email and we’ll tell you when it ships, nothing else, ever.
Read the sources
These are the official pages the questions above cite. Reading them is studying the objective from the primary source, which is what the explanations point you toward anyway.
More objectives in Security Operations
- 1.2 1.2 Given a scenario, analyze indicators of potentially malicious activity.
- 1.3 1.3 Given a scenario, use appropriate tools or techniques to determine malicious activity.
- 1.4 1.4 Compare and contrast threat-intelligence and threat-hunting concepts.
- 1.5 1.5 Explain the importance of efficiency and process improvement in security operations.