Objective 1.1
CS0-003Explain the importance of system and network architecture concepts in security operations.
Objective 1.1 sits in Security Operations, which carries 33% of the CySA+ exam. The questions below are original, written from the official objective title above, and each explanation cites the CompTIA page it rests on.
Objective title verbatim from the official objectives. CompTIA exam page ↗
A worked example
Shown solved, with the whole explanation open: this is what every question here carries.
An analyst configures a syslog relay to forward only messages more important than LOG_ERR. Which level passes the filter?
Correct.
Checked against man7.org, August 2026Concept
Syslog severities are an ordered scale, and forwarding filters keyed to importance admit everything at or past a threshold. Reading the scale in the wrong direction turns a filter into silence or noise.
Why B
The scale runs from LOG_EMERG down to LOG_DEBUG in decreasing importance. Only LOG_EMERG, LOG_ALERT, and LOG_CRIT outrank LOG_ERR, so of the levels listed, only the critical level clears the filter.
Source
syslog(3), Linux manual page, checked August 2026This determines the importance of the message. The levels are, in order of decreasing importance: LOG_EMERG system is unusable LOG_ALERT action must be taken immediately LOG_CRIT critical conditions LOG_ERR error conditions LOG_WARNING warning conditions…
Now you: objective 1.1 questions
No account needed. The explanation opens when you answer.
Sample question 1 of 3
Which syslog facility is reserved for security and authorization messages that should stay private?
Sample question 2 of 3
During a review, an analyst sees events tagged with the kern facility arriving from an unprivileged user process and suspects tampering. Why is that suspicious?
Sample question 3 of 3
You are defining the audit logging for a new customer portal, and storage pressure pushes the team to record as little authentication activity as possible. Which authentication events must the application record?
Full CySA+ question bank coming
We’re writing the complete bank from the official objectives right now. Leave your email and we’ll tell you when it ships, nothing else, ever.
Read the sources
These are the official pages the questions above cite. Reading them is studying the objective from the primary source, which is what the explanations point you toward anyway.
More objectives in Security Operations
- 1.2 Given a scenario, analyze indicators of potentially malicious activity.
- 1.3 Given a scenario, use appropriate tools or techniques to determine malicious activity.
- 1.4 Compare and contrast threat-intelligence and threat-hunting concepts.
- 1.5 Explain the importance of efficiency and process improvement in security operations.