ExamGecko
Question list
Search
Search

List of questions

Search

Related questions











Question 183 - CS0-003 discussion

Report
Export

An analyst is suddenly unable to enrich data from the firewall. However, the other open intelligence feeds continue to work. Which of the following is the most likely reason the firewall feed stopped working?

A.
The firewall service account was locked out.
Answers
A.
The firewall service account was locked out.
B.
The firewall was using a paid feed.
Answers
B.
The firewall was using a paid feed.
C.
The firewall certificate expired.
Answers
C.
The firewall certificate expired.
D.
The firewall failed open.
Answers
D.
The firewall failed open.
Suggested answer: C

Explanation:

The firewall certificate expired. If the firewall uses a certificate to authenticate and encrypt the feed, and the certificate expires, the feed will stop working until the certificate is renewed or replaced. This can affect the data enrichment process and the security analysis.

Reference: CompTIA CySA+ Study Guide: Exam CS0-003, 3rd Edition, Chapter 4: Security Operations and Monitoring, page 161.

asked 02/10/2024
Juan Tovar
38 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first