CySA+

An analyst must correlate authentication failures across many servers to detect a distributed brute-force attempt. Which platform is designed for this?

Which Windows Security event IDs record successful and failed logons, useful for detecting password-guessing?

Before correlating logs from multiple systems during an investigation, why is time synchronization (NTP) essential?

Which model requires that every access request be authenticated and authorized continuously, regardless of network location?

A company wants to limit lateral movement so a breach in one zone cannot reach critical servers. Which control best achieves this?

Which control most effectively prevents account takeover even when a user's password has been phished?

Which capability vaults administrator credentials and grants time-limited, just-in-time elevation with session recording?

Which combination of email-authentication technologies lets a receiver detect and reject spoofed messages and get failure reports?

An analyst must safely determine what a suspicious executable does without risking production. Which technique is appropriate?

Which endpoint technology continuously records process, file, and network activity and enables behavioral detection and response?