CompTIA SY0-601 Online Practice Questions and Exam Preparation

CompTIA SY0-601 Online Questions & Answers

• Question 1101:

  A root cause analysis reveals that a web application outage was caused by one of the company's developers uploading a newer version of the third-party libraries that were shared among several applications. Which of the following implementations would be BEST to prevent the issue from reoccurring?

  A. CASB
  B. SWG
  C. Containerization
  D. Automated failover
  C. Containerization

  ---

  Explanation Explanation/Reference:Containerization is defined as a form of operating system virtualization, through which applications are run in isolated user spaces called containers, all using the same shared operating system (OS).

• Question 1102:

  Which of the following can be used to identify potential attacker activities without affecting production servers?

  A. Honeypot
  B. Video surveillance
  C. Zero trust
  D. Geofencing
  A. Honeypot

  ---

  A honeypot is a cybersecurity strategy used to identify potential attacker activities without affecting production servers. It involves setting up a decoy system or network with the appearance of being a valuable target to attackers. The honeypot is designed to attract and lure attackers, allowing security teams to monitor their actions, study their techniques, and gather information about their tactics without putting the actual production environment at risk. By analyzing the activities of attackers on the honeypot, security professionals can gain insights into potential threats, vulnerabilities, and attack patterns. It provides an opportunity to detect and understand new and emerging threats before they impact the organization's critical systems and data.

• Question 1103:

  A security analyst wants to fingerpnnt a web server Which of the following tools will the security analyst MOST likely use to accomplish this task?

  A. nmap -p1-65S35 192.168.0.10
  B. dig 192.168.0.10
  C. cur1 --htad http://192.168.0.10
  D. ping 192.168.0.10
  C. cur1 --htad http://192.168.0.10

  ---

  HTTP/1.1 301 Moved Permanently Server: cloudflare Date: Thu, 01 Sep 2022 22:36:50 GMT Content-Type: text/html Content-Length: 167 Connection: keep-alive Location: https://1.1.1.1/ CF-RAY: 74417cb04d6b9a50-MFE

• Question 1104:

  A financial organization has adopted a new secure, encrypted document-sharing application to help with its customer loan process. Some important PII needs to be shared across this new platform, but it is getting blocked by the DLP systems. Which of the following actions will BEST allow the PII to be shared with the secure application without compromising the organization's security posture?

  A. Configure the DLP policies to allow all PII
  B. Configure the firewall to allow all ports that are used by this application
  C. Configure the antivirus software to allow the application
  D. Configure the DLP policies to whitelist this application with the specific PII
  E. Configure the application to encrypt the PII
  D. Configure the DLP policies to whitelist this application with the specific PII

• Question 1105:

  Which of the following would be BEST to establish between organizations to define the responsibilities of each party outline the key deliverables and include monetary penalties for breaches to manage third-party risk?

  A. An ARO
  B. An MOU
  C. An SLA
  D. A BPA
  C. An SLA

  ---

  Explanation Explanation/Reference:Comptia exams are all about keywords and the catch here is "include monetary penalties for breaches". SLA includes penalties for not delivering services up to contract, BPA does not.

• Question 1106:

  An analyst is working on an email incident in which target opened an attachment containing a worm. The analyst wants to implement mitigation techniques to prevent further spread. Which of the following is the BEST course of action for the analyst to take?

  A. Apply a DLP solution
  B. Implement network segmentation.
  C. Utilize email content filtering.
  D. Isolate the infected attachment.
  B. Implement network segmentation.

• Question 1107:

  A company is switching to a remote work model for all employees. All company and employee resources will be in the cloud. Employees must use their personal computers to access the cloud computing environment. The company will manage the operating system. Which of the following deployment models is the company implementing?

  A. CYOD
  B. MDM
  C. COPE
  D. VDI
  D. VDI

  ---

  Explanation Explanation/Reference:According to Professor Messer's video1, VDI stands for Virtual Desktop Infrastructure and it is a deployment model where employees use their personal computers to access a virtual machine that runs the company's operating system and applications. In the scenario described, the company is implementing a virtual desktop infrastructure (VDI) deployment model [1]. This allows employees to access the cloud computing environment using their personal computers, while the company manages the operating system. The VDI model is suitable for remote work scenarios because it provides secure and centralized desktop management, while allowing employees to access desktops from any device.

• Question 1108:

  A security analyst is preparing a threat for an upcoming internal penetration test. The analyst needs to identify a method for determining the tactics, techniques, and procedures of a threat against the organization's network. Which of the following will the analyst MOST likely use to accomplish the objective?

  A. A table exercise
  B. NST CSF
  C. MTRE ATT$CK
  D. OWASP
  C. MTRE ATT$CK

  ---

  Explanation Explanation/Reference:MITRE ATTandCK can be used to classify attacks.

• Question 1109:

  A major political party experienced a server breach. The hacker then publicly posted stolen internal communications concerning campaign strategies to give the opposition party an advantage. Which of the following BEST describes these threat actors?

  A. Semi-authorized hackers
  B. State actors
  C. Script kiddies
  D. Advanced persistent threats
  B. State actors

  ---

  APT=An attacker's ability to obtain, maintain, and diversify access to network systems using exploits and malware. Stateactor=A type of threat actor that is supported by the resources of its host country's military and security services.

• Question 1110:

  Which of the following are the MOST likely vectors for the unauthorized inclusion of vulnerable code in a software company's final software releases? (Select TWO.)

  A. Unsecure protocols
  B. Use of penetration-testing utilities
  C. Weak passwords
  D. Included third-party libraries
  E. Vendors/supply chain
  F. Outdated anti-malware software
  D. Included third-party libraries
  F. Outdated anti-malware software

  ---

  A. Unsecure protocols --> Could be correct. This is a vector that could be used shortly before the final release to somehow include malicious code. B. Use of penetration-testing utilities --> Makes no sense C. Weak passwords --> Is an attack vector and "unauthorized" could match that. Might be correct. D. Included third-party libraries --> unintentional would fit. But if there was something wrong with a 3rd party libary, that should have been discovered before the final release. E. Vendors/supply chain --> Depends on what these vendors do. If they are developing code that is used in the final release it could contain vulnerabilities that are included unintentionally. But that would be kind of similar to the 3rd party libraries. F. Outdated anti-malware software --> malware outdated in the developer's computer... Hence a malware located in the developer's computer can be unintentionally added to the SW before it is released