CompTIA SY0-601 Online Practice Questions and Exam Preparation

CompTIA SY0-601 Online Questions & Answers

• Question 1:

  A security analyst discovers that a company's username and password database was posted on an Internet forum. The username and passwords are stored in plain text. Which of the following would mitigate the damage done by this type of data exfiltration in the future?

  A. Create DLP controls that prevent documents from leaving the network
  B. Implement salting and hashing
  C. Configure the web content filter to block access to the forum.
  D. Increase password complexity requirements
  B. Implement salting and hashing

• Question 2:

  A security analyst needs to be able to search and correlate logs from multiple sources in a single tool

  Which of the following would BEST allow a security analyst to have this ability?

  A. SOAR
  B. SIEM
  C. Log collectors
  D. Network-attached storage
  B. SIEM

  ---

  SIEM event correlation is an essential part of any SIEM solution. It aggregates and analyzes log data from across your network applications, systems, and devices, making it possible to discover security threats and malicious patterns of behaviors that otherwise go unnoticed and can lead to compromise or data loss.

• Question 3:

  An organization is building a single virtual environment that will host customer applications and data that require availability at all times. The data center that is hosting the environment will provide generator power and ISP services. Which of the following is the best solution to support the organization's requirement?

  A. NIC teaming
  B. Cloud backups
  C. A load balancer appliance
  D. UPS
  D. UPS

  ---

  While NIC teaming, cloud backups, and load balancer appliances are all important for different aspects of an IT infrastructure, they do not directly address the need for continuous power availability, which is the primary concern in this scenario. UPS, in combination with backup generators and ISP services, helps ensure that the data center remains operational even during power-related issues.

• Question 4:

  A security analyst is responding to an alert from the SIEM. The alert states that malware was discovered on a host and was not automatically deleted. Which of the following would be BEST for the analyst to perform?

  A. Add a deny-all rule to that host in the network ACL
  B. Implement a network-wide scan for other instances of the malware.
  C. Quarantine the host from other parts of the network
  D. Revoke the client's network access certificates
  C. Quarantine the host from other parts of the network

• Question 5:

  A database administrator needs to ensure all passwords are stored in a secure manner, so the administrate adds randomly generated data to each password before string. Which of the following techniques BEST explains this action?

  A. Predictability
  B. Key stretching
  C. Salting
  D. Hashing
  B. Key stretching

  ---

  A cryptographic salt is made up of random bits added to each password instance BEFORE its hashing. In cryptography, key stretching techniques are used to make a possibly weak key, typically a password or passphrase, more secure against a brute-force attack by increasing the resources it takes to test each possible key. Key stretching is the practice of converting a password to a longer and more random key for cryptographic purposes such as encryption. This is generally recognized as making encryption stronger as it ensures that the encryption itself is reasonably hard.

• Question 6:

  A company has decided to move its operations to the cloud. It wants to utilize technology that will prevent users from downloading company applications for personal use, restrict data that is uploaded, and have visibility into which applications are being used across the company.

  Which of the following solutions will BEST meet these requirements?

  A. An NGFW
  B. A CASB
  C. Application whitelisting
  D. An NG-SWG
  B. A CASB

  ---

  Monitors all users activity and enforces security policies CASB then determines the risk level associated with each by determining what the application is, what sort of data is within the app, and how it is being shared. https://www.mcafee.com/enterprise/en-au/security-awareness/cloud/what-is-a-casb.html

• Question 7:

  A bad actor tries to persuade someone to provide financial information over the phone in order to gain access to funds. Which of the following types of attacks does this scenario describe?

  A. Vishing
  B. Phishing
  C. Spear phishing
  D. Whaling
  A. Vishing

  ---

  https://en.wikipedia.org/wiki/Voice_phishing

• Question 8:

  A company is concerned about individuals driving a car into the building to gain access. Which of the following security controls would work BEST to prevent this from happening?

  A. Bollard
  B. Camera
  C. Alarms
  D. Signage
  E. Access control vestibule
  A. Bollard

  ---

  Explanation Explanation/Reference:Bollards are posts designed to prevent vehicles from entering an area. They are usually made of steel or concrete and are placed close together to make it difficult for vehicles to pass through. In addition to preventing vehicles from entering an area, bollards can also be used to protect buildings and pedestrians from ramming attacks. They are an effective and cost-efficient way to protect buildings and pedestrians from unauthorized access.

• Question 9:

  Which of the following identifies the point in time when an organization will recover data in the event of an outage?

  A. ALE
  B. RPO
  C. MTBF
  D. ARO
  B. RPO

• Question 10:

  A systems administrator needs to install the same X.509 certificate on multiple servers. Which of the following should the administrator use?

  A. Key escrow
  B. A self-signed certificate
  C. Certificate chaining
  D. An extended validation certificate
  B. A self-signed certificate