A security analyst wants to detect malicious activity that has not yet been identified by signature-based tools. Which two techniques are commonly used together to identify such threats by analyzing attacker interactions and user behavior patterns?

Firewalls and intrusion prevention systems (IPS)

Vulnerability scanners and patch management tools

Honeypots and User Behavior Analytics (UBA)

Data loss prevention (DLP) and encryption tools

What is the defining characteristic of Open Source Intelligence (OSINT)?

It is generated by the organization's own sensors

It is obtained exclusively from dark web forums

It is derived from publicly available information

It requires a paid subscription to a commercial feed

What is the primary function of User Behavior Analytics (UBA) in an organization's security operations?

To replace multi-factor authentication for all users

To block all traffic from unknown IP addresses

To establish baselines of normal user activity and flag deviations

To encrypt all data stored in the cloud

What is the primary role of an Information Sharing and Analysis Center (ISAC)?

To provide legal representation for organizations affected by cyberattacks

To sell antivirus software to member organizations

To regulate cybersecurity practices within an industry

To facilitate sharing of threat intelligence among organizations within a specific industry

CompTIASecurityX (CASP+)

Domain 4Objective 3

Threat Hunting CAS-005 Practice Questions (Page 9)

Part of the Security operations domain, which accounts for 22% of the CAS-005 exam. CompTIA does not publish an official question count, but from its 165-minute exam (~65–110 total, ~14–24 in this domain), expect 4–6 from this objective — we provide 45 practice questions to prepare you well beyond it. (estimate)

45questions here

9free pages

15concepts

22%of the exam

Questions 41–45

41foundation · easy
A security analyst wants to detect malicious activity that has not yet been identified by signature-based tools. Which two techniques are commonly used together to identify such threats by analyzing attacker interactions and user behavior patterns?
Select an answer first
42foundation · easy
What is the defining characteristic of Open Source Intelligence (OSINT)?
Select an answer first
43foundation · easy
What is the primary function of User Behavior Analytics (UBA) in an organization's security operations?
Select an answer first
44foundation · easy
Which of the following is an example of a rule-based language used for threat detection?
Select an answer first
45foundation · easy
What is the primary role of an Information Sharing and Analysis Center (ISAC)?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to CAS-005

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CompTIA. “CAS-005” is a trademark of its owner, used for identification only.