CompTIA SY0-601 Online Practice Questions and Exam Preparation

CompTIA SY0-601 Online Questions & Answers

• Question 1061:

  A vulnerability scan returned the following results:

  2 Critical 5 High 15 Medium 98 Low

  Which of the following would the information security team most likely use to decide if all discovered vulnerabilities must be addressed and the order in which they should be addressed?

  A. Risk appetite
  B. Risk register
  C. Risk matrix
  D. Risk acceptance
  C. Risk matrix

• Question 1062:

  An organization with a low tolerance for user inconvenience wants to protect laptop hard drives against loss or data theft. Which of the following would be the MOST acceptable?

  A. SED
  B. HSM
  C. DLP
  D. TPM
  A. SED

  ---

  Explanation Explanation/Reference:Self-encrypting drives are pretty fool proof, for the current iteration of fools.

• Question 1063:

  A user's laptop constantly disconnects from the Wi-Fi network. Once the laptop reconnects, the user can reach the internet but cannot access shared folders or other network resources. Which of the following types of attacks is the user MOST likely experiencing?

  A. Bluejacking
  B. Jamming
  C. Rogue access point D. Evil twin
  C. Rogue access point D. Evil twin

• Question 1064:

  Which of the following agreements defines response time, escalation points, and performance metrics?

  A. BPA
  B. MOA
  C. NDA
  D. SLA
  D. SLA

  ---

  An SLA (Service Level Agreement) is a formal agreement between a service provider and a customer that defines the terms and conditions of the service being provided. It outlines the agreed-upon response time, escalation points, performance metrics, and other service-related parameters. SLAs are commonly used in various business relationships to establish clear expectations and ensure that the service provider meets the agreed-upon standards of service delivery.

• Question 1065:

  Per company security policy, IT staff members are required to have separate credentials to perform administrative functions using just-in-time permissions. Which of the following solutions is the company Implementing?

  A. Privileged access management
  B. SSO
  C. RADIUS
  D. Attribute-based access control
  A. Privileged access management

• Question 1066:

  A security analyst finds a rogue device during a monthly audit of current endpoint assets that are connected to the network. The corporate network utilizes 802.1 X for access control. To be allowed on the network, a device must have a known hardware address, and a valid username and password must be entered in a captive portal. The following is the audit report:

  

  Which of the following is the most likely way a rogue device was allowed to connect?

  A. A user performed a MAC cloning attack with a personal device.
  B. A DHCP failure caused an incorrect IP address to be distributed.
  C. An administrator bypassed the security controls for testing.
  D. DNS hijacking let an attacker intercept the captive portal traffic.
  A. A user performed a MAC cloning attack with a personal device.

  ---

  Explanation Explanation/Reference:

• Question 1067:

  A security administrator is integrating several segments onto a single network. One of the segments, which includes legacy devices, presents a significant amount of risk to the network.

  Which of the following would allow users to access to the legacy devices without compromising the security of the entire network?

  A. NIDS
  B. MAC filtering
  C. Jump server
  D. IPSec
  E. NAT gateway
  C. Jump server

  ---

  A jump server is a device that acts as an intermediary between users and other devices on a network. A jump server can provide a secure and controlled access point to the legacy devices without exposing them directly to the network. A jump server can also enforce authentication, authorization, logging, and auditing policies.

• Question 1068:

  An organization has been experiencing outages during holiday sales and needs to ensure availability of its point-of-sale systems The IT administrator has been asked to improve both server-data fault tolerance and site availability under high consumer load Which of the following are the BEST options to accomplish this objective? (Select TWO)

  A. Load balancing
  B. Incremental backups
  C. UPS
  D. RAID
  E. Dual power supply
  F. NIC teaming
  A. Load balancing
  D. RAID

• Question 1069:

  As part of annual audit requirements, the security team performed a review of exceptions to the company policy that allows specific users the ability to use USB storage devices on their laptops. The review yielded the following results. The exception process and policy have been correctly followed by the majority of users A small number of users did not create tickets for the requests but were granted access All access had been approved by supervisors. Valid requests for the access sporadically occurred across multiple departments. Access, in most cases, had not been removed when it was no longer needed

  Which of the following should the company do to ensure that appropriate access is not disrupted but unneeded access is removed in a reasonable time frame?

  A. Create an automated, monthly attestation process that removes access if an employee's supervisor denies the approval
  B. Remove access for all employees and only allow new access to be granted if the employee's supervisor approves the request
  C. Perform a quarterly audit of all user accounts that have been granted access and verify the exceptions with the management team
  D. Implement a ticketing system that tracks each request and generates reports listing which employees actively use USB storage devices
  C. Perform a quarterly audit of all user accounts that have been granted access and verify the exceptions with the management team

• Question 1070:

  An organization is repairing the damage after an incident. Which of the following controls is being implemented?

  A. Detective
  B. Preventive
  C. Corrective
  D. Compensating
  C. Corrective

  ---

  Corrective controls are measures that are put in place to fix problems or weaknesses that have been identified. They are typically implemented after an incident has occurred in order to repair the damage and prevent similar incidents from happening in the future. In this scenario, the organization is repairing the damage after an incident, which suggests that corrective controls are being implemented. Detective controls are measures that are put in place to detect when a problem or weakness has occurred. Preventive controls are measures that are put in place to prevent problems or weaknesses from occurring in the first place. Compensating controls are measures that are put in place to compensate for weakness or deficiency in another control.