CS0-003: CompTIA Cybersecurity Analyst (CySA+)

Dynamic application security testing (DAST) scans a running web application as a black-box target, injecting test payloads and analyzing responses to identify vulnerabilities such as SQL injection and cross-site scripting. It is an appropriate security-scanning method for finding these externally observable web-application flaws.

Risk appetite establishes which losses an organization considers unacceptable and guides operational risk decisions. The potential impact of a fast-moving ransomware incident on data confidentiality and integrity warrants rapid containment when those objectives are prioritized over monetary considerations.

Photographs preserve the physical condition, arrangement, and connections of affected equipment as evidence before the scene is altered. NIST incident-forensics guidance recommends photographing evidence to retain visual records of computer setups and peripheral devices, alongside detailed evidence-handling documentation.

Attack methodology frameworks model the tactics, techniques, behaviors, and motivations of adversaries so defenders can assess security from an attacker’s perspective and develop appropriate detections and mitigations.

A risk assessment identifies and evaluates threats, vulnerabilities, likelihood, and business impact, producing the summarized risk information needed for an executive briefing.