CompTIA SY0-601 Online Practice Questions and Exam Preparation

CompTIA SY0-601 Online Questions & Answers

• Question 1331:

  A small business office is setting up a wireless infrastructure with primary requirements centered around protecting customer information and preventing unauthorized access to the business network.

  Which of the following would BEST support the office's business needs? (Select TWO)

  A. Installing WAPs with strategic placement
  B. Configuring access using WPAs
  C. Installing a WIDS
  D. Enabling MAC filtering
  E. Changing the WiFi password every 30 days
  F. Reducing WiFi transmit power throughout the office
  B. Configuring access using WPAs
  D. Enabling MAC filtering

• Question 1332:

  Which of the following can be used to detect a hacker who is stealing company data over port 80?

  A. Web application scan
  B. Threat intelligence
  C. Log aggregation
  D. Packet capture
  D. Packet capture

  ---

  Using a SIEM tool to monitor network traffic in real-time and detect any anomalies or malicious activities Monitoring all network protocols and ports to detect suspicious volumes of traffic or connections to uncommon IP addresses Monitoring for outbound traffic patterns that indicate malware communication with command and control servers, such as beaconing or DNS tunneling Using a CASB tool to control access to cloud resources and prevent data leaks or downloads Encrypting data at rest and in transit and enforcing strong authentication and authorization policies

• Question 1333:

  To mitigate the impact of a single VM being compromised by another VM on the same hypervisor, an administrator would like to utilize a technical control to further segregate the traffic. Which of the following solutions would BEST accomplish this objective?

  A. Install a hypervisor firewall to filter east-west traffic
  B. Add more VLANs to the hypervisor network switches
  C. Move exposed or vulnerable VMs to the DMZ.
  D. Implement a zero-trust policy and physically segregate the hypervisor servers.
  B. Add more VLANs to the hypervisor network switches

  ---

  Vlans segment traffic so I guess so I guess that's what they mean by segregate

• Question 1334:

  A Chief Information Security Officer (CISO) is concerned about the organization's ability to continue business operation in the event of a prolonged DDoS attack on its local datacenter that consumes database resources. Which of the following will the CISO MOST likely recommend to mitigate this risk?

  A. Upgrade the bandwidth available into the datacenter
  B. Implement a hot-site failover location
  C. Switch to a complete SaaS offering to customers
  D. Implement a challenge response test on all end-user queries
  B. Implement a hot-site failover location

  ---

  Explanation Explanation/Reference:The question asks for mitigation measures in the event of a DDoS attack, not preventative measures to keep it from happening in the first place. It's failover hot site.