Practice Exam 1
5 of this form’s 85 questions, drawn from across its domains, free. The explanation on every one of them is free too, at every tier, and always will be.
Question 1 of 5
2-5Vulnerability ManagementYou are drafting a vulnerability disclosure policy, and the legal team needs the organization's commitments to researchers who report in good faith. Which obligations does the guidance list?
Question 2 of 5
1-4Security OperationsAn analyst wants to record a producer's recommended response to a threat as a distinct STIX object. Which SDO represents that?
Question 3 of 5
1-5Security OperationsAnalysts keep blocking benign IPs that arrive in shared feeds. Which MISP capability reduces that specific failure?
Question 4 of 5
4-1Reporting and CommunicationChoose 2An analyst at a federal agency completes a scanning cycle and then receives an on-demand request from CISA. Which two delivery deadlines apply? (Choose two.)
Question 5 of 5
3-1Incident Response and ManagementA report frames an intrusion against the Cyber Kill Chain. How many steps does that framework define?
0 of 85 completed
The other 80 questions are the rest of this form: same 165 minute clock, same 750 cut score, and the same explanation on every question, which is never behind the wall. Practice Exam 1 of 2 on CySA+.
What this exam covers
- Security Operations28 questions / 33% of the exam
- Vulnerability Management26 questions / 30% of the exam
- Incident Response and Management17 questions / 20% of the exam
- Reporting and Communication14 questions / 17% of the exam
Checking what you already have access to.
Every question is original, written from the published objectives. We never reproduce, paraphrase, or imitate real exam content, and neither should anything else you study from.