CompTIA SY0-601 Online Practice Questions and Exam Preparation

CompTIA SY0-601 Online Questions & Answers

• Question 1181:

  Which of the following controls would provide the BEST protection against tailgating?

  A. Access control vestibule
  B. Closed-circuit television
  C. Proximity card reader
  D. Faraday cage
  A. Access control vestibule

• Question 1182:

  A security analyst is using OSINT to gather information to verity whether company data is available publicly. Which of the following is the BEST application for the analyst to use?

  A. Harvester
  B. Cuckoo
  C. Nmap
  D. Nessus
  A. Harvester

  ---

  TheHarvester is a reconnaissance tool that is used to gather information about a target organization, such as email addresses, subdomains, and IP addresses. It can also be used to gather information about a target individual, such as email addresses, phone numbers, and social media profiles. TheHarvester is specifically designed for OSINT (Open-Source Intelligence) and it can be used to discover publicly available information about a target organization or individual.

• Question 1183:

  A security operations analyst is using the company's SIEM solution to correlate alerts. Which of the following stages of the incident response process is this an example of?

  A. Eradication
  B. Recovery
  C. Identification
  D. Preparation
  C. Identification

  ---

  C: Identification Incident response lifecycle: -preparation -detection and analysis -containment, eradication, recovery -post-incident activity

• Question 1184:

  An organization wants to implement a third factor to an existing multifactor authentication. The organization already uses a smart card and password. Which of the following would meet the organization's needs for a third factor?

  A. Date of birth
  B. Fingerprints
  C. PIN
  D. TPM
  B. Fingerprints

• Question 1185:

  A security manager for a retailer needs to reduce the scope of a project to comply with PCI DSS. The PCI data is located in different offices than where credit cards are accepted. All the offices are connected via MPLS back to the primary datacenter.

  Which of the following should the security manager implement to achieve the objective?

  A. Segmentation
  B. Containment
  C. Geofencing
  D. Isolation
  A. Segmentation

• Question 1186:

  A company is implementing a DLP solution on the file server. The file server has Pll. financial information, and health information stored on it Depending on what type of data that is hosted on the file server, the company wants different DLP rules assigned to the data

  Which of the following should the company do to help accomplish this goal?

  A. Classify the data
  B. Mask the data
  C. Assign an application owner
  D. Perform a risk analysis
  A. Classify the data

  ---

  A. Classify the data - helps create different data types to apply different rules B. Mask the data - mask sensitive part of the data won't help distinguishing data C. Assign the application owner - not relevant D. Perform a risk analysis - does not distinguish different data

• Question 1187:

  An attacker posing as the Chief Executive Officer calls an employee and instructs the employee to buy gift cards. Which of the following techniques is the attacker using?

  A. Smishing
  B. Phishing
  C. Impersonating
  D. Vishing
  D. Vishing

• Question 1188:

  An organization's Chief Information Security Officer is creating a position that will be responsible for implementing technical controls to protect data, including ensuring backups are properly maintained. Which of the following roles would MOST likely include these responsibilities?

  A. Data protection officer
  B. Data owner
  C. Backup administrator
  D. Data custodian
  E. Internal auditor
  D. Data custodian

  ---

  Data Custodians The primary responsibilities of a data custodian are: Maintain physical and system security including physical security of servers and data user security as determined appropriate by the Data Trustees or Data Stewards. Ensure adequate system backups and disaster recovery plans. https://www.belmont.edu/oair/data-governance/role-data-custodians.html#:~:text=Data%20Custodiansandtext=The%20primary%20responsibilities%20of%20a,backups%20and%20disaster%20recovery%20plans.

• Question 1189:

  Under GDPR, which of the following is MOST responsible for the protection of privacy and website user rights?

  A. The data protection officer
  B. The data processor
  C. The data owner
  D. The data controller
  D. The data controller

  ---

  Data Owner and Data Controller are very similar concepts, but Data Controller is a GDPR term, and Data Owner isn't. The question specifically asks for a GDPR term.

• Question 1190:

  A major manufacturing company updated its internal infrastructure and just started to allow OAuth application to access corporate data Data leakage is being reported.

  Which of following most likely caused the issue?

  A. Privilege creep
  B. Unmodified default
  C. TLS
  D. Improper patch management
  B. Unmodified default