{"id":355,"date":"2019-01-16T07:00:34","date_gmt":"2019-01-16T13:00:34","guid":{"rendered":"https:\/\/packitforwarding.com\/?p=355"},"modified":"2019-01-13T19:32:05","modified_gmt":"2019-01-14T01:32:05","slug":"comptia-cysa-objective-3-1","status":"publish","type":"post","link":"https:\/\/packitforwarding.com\/index.php\/2019\/01\/16\/comptia-cysa-objective-3-1\/","title":{"rendered":"CompTIA CySA+ Objective 3.1"},"content":{"rendered":"\n


Given a scenario, distinguish threat data or behavior to determine the impact of an incident. <\/p>
CompTIA Cybersecurity Analyst (CySA+) Certification Exam Objectives Version 3.0
<\/cite><\/blockquote>\n\n\n\n

Threat Classification<\/h3>\n\n\n\n

Security threats can be classified by several characteristics. First, they are classified on whether or not they are known or not. Known threats are identified and reported. Unknown threats are those which have not yet been discovered. Unknown threats can become zero day threats when they are used against systems. Zero day threats are dangerous because they are exploited before systems like antivirus and intrusion prevention systems have signatures to recognize the attack.<\/p>\n\n\n\n

Advanced Persistent Threats (APT) is an organized long term attack against an organization. The Target credit card breech was an example of an APT.<\/p>\n\n\n\n

Contributing Factors to Incident Severity and Prioritization<\/h3>\n\n\n\n

To properly prioritize incidents they must be classified by scope of the incident and what has been put at risk.<\/p>\n\n\n\n

Scope of Impact<\/h4>\n\n\n\n

One classification for impact is how much downtime is incurred and how long will it take to recover. The following apply to this classification:<\/p>\n\n\n\n