CompTIA Study Materials
AWS Study Materials
AWS Certified Developer Associate AWS Certified Developer Associate
AWS Certified Developer Associate DVA-C02
AWS Certified Solutions Architect Associate AWS Certified Solutions Architect Associate
AWS Certified Solutions Architect Associate SAA-C03
AWS Cloud Practitioner AWS Cloud Practitioner
AWS Cloud Practitioner CLF-C02
Microsoft Study Materials
Microsoft Azure Fundamentals Microsoft Azure Fundamentals
Microsoft Azure Fundamentals AZ-900

Free CompTIA CySA+ CS0-003 Practice Question

An organization’s network has been breached, and the security team has identified unusual encrypted traffic traversing to an external IP address. Additionally, a custom tool was found installed on one of the servers, which was not authorized or recognized by the IT department. In the context of the Diamond Model of Intrusion Analysis, which component does the unauthorized custom tool best exemplify?

  • Capability

  • Infrastructure

  • Adversary

  • Victim

This question's topic:
CompTIA CySA+ CS0-003 / 
Incident Response and Management
Your Score:
Incident Response and Management
Security Operations
Vulnerability Management
Reporting and Communication