Free CompTIA CySA+ CS0-004 practice questions

Sample question 1. A retail site sees thousands of logins a day using username and password pairs from other companies’ breaches, and some succeed. The site has no MFA and no protection against automated attempts. Which OWASP Top 10:2025 category does this weakness fall under?

1. Broken Access Control.
2. Authentication Failures.
3. Cryptographic Failures.
4. Security Logging and Alerting Failures.

Sample question 2. Investigators confirm an intruder is staging customer records on one internal server. A law enforcement liaison asks the company to keep watching for a few days to identify the operator. Meanwhile, the customer data is still leaving. Who should decide whether to contain now, and on what basis?

1. The on-shift analyst, based on that person’s judgment of the technical risk to the server.
2. The law enforcement liaison, because evidence collection always takes priority over containment.
3. The incident commander, with legal and executive input on damage, evidence and service impact.
4. A vote of every responder on the bridge, with the majority choice then applied by the team.

Sample question 3. A new vulnerability program sends every report only to the security team. Which step would MOST improve remediation?

1. Send the same reports more often to the security team.
2. Send the reports only to the CISO, who forwards what matters.
3. Report to each asset’s owners and business leaders.
4. Send findings only to software vendors.