CompTIA SY0-601 Online Practice Questions and Exam Preparation

CompTIA SY0-601 Online Questions & Answers

• Question 241:

  A systems administrator is considering switching from tape backup to an alternative backup solution that would allow data to be readily available in the event of a disaster. Which of the following backup types should the administrator implement?

  A. Copy
  B. Incremental
  C. Cloud
  D. Disk
  E. Storage area network
  C. Cloud

• Question 242:

  A network engineer and a security engineer are discussing ways to monitor network operations. Which of the following is the BEST method?

  A. Disable Telnet and force SSH.
  B. Establish a continuous ping.
  C. Utilize an agentless monitor
  D. Enable SNMPv3 With passwords.
  C. Utilize an agentless monitor

• Question 243:

  Which of the following is a security implication of newer ICS devices that are becoming more common in corporations?

  A. Devices with cellular communication capabilities bypass traditional network security controls
  B. Many devices do not support elliptic-curve encryption algorithms due to the overhead they require
  C. These devices often lack privacy controls and do not meet newer compliance regulations
  D. Unauthorized voice and audio recording can cause loss of intellectual property
  A. Devices with cellular communication capabilities bypass traditional network security controls

• Question 244:

  A security team is engaging a third-party vendor to do a penetration test of a new proprietary application prior to its release. Which of the following documents would the third-party vendor most likely be required to review and sign?

  A. SLA
  B. NDA
  C. MOU
  D. AUP
  B. NDA

  ---

  NDA stands for Non-Disclosure Agreement, which is a legal contract that binds the parties to keep confidential information secret and not to disclose it to unauthorized parties. A third-party vendor who is doing a penetration test of a new proprietary application would most likely be required to review and sign an NDA to protect the intellectual property and trade secrets of the security team.

• Question 245:

  A security analyst is reviewing the following system command history on a computer that was recently utilized in a larger attack on the corporate infrastructure:

  

  Which of the following best describes what the analyst has discovered?

  A. A successful privilege escalation attack by a local user
  B. A user determining what level of permissions the user has
  C. A systems administrator performing routine maintenance
  D. An attempt to utilize living-off-the-land binaries
  A. A successful privilege escalation attack by a local user

  ---

  Explanation Explanation/Reference:

• Question 246:

  Joe, a security analyst, recently performed a network discovery to fully understand his organization's electronic footprint from a "public" perspective. Joe ran a set of commands and received the following output:

  

  Which of the following can be determined about the organization's public presence and security posture? (Select TWO).

  A. Joe used Whois to produce this output.
  B. Joe used cURL to produce this output.
  C. Joe used Wireshark to produce this output.
  D. The organization has adequate information available in public registration.
  E. The organization has too much information available in public registration.
  F. The organization has too little information available in public registration.
  A. Joe used Whois to produce this output.
  D. The organization has adequate information available in public registration.

• Question 247:

  A security administrator needs to inspect in-transit files on the enterprise network to search for PII, credit card data, and classification words. Which of the following would be the BEST to use?

  A. IDS solution
  B. EDR solution
  C. HIPS software solution
  D. Network DLP solution
  D. Network DLP solution

  ---

  Explanation Explanation/Reference:DLP - blocks extraction of sensitive data such as PII, PHI, credit card numbers.

• Question 248:

  Which of the following BEST describes a technique that compensates researchers for finding vulnerabilities?

  A. Penetration testing
  B. Code review
  C. Wardriving
  D. Bug bounty
  D. Bug bounty

• Question 249:

  An organization discovered a disgruntled employee exfiltrated a large amount of PII data by uploading files.

  Which of the following controls should the organization consider to mitigate this risk?

  A. EDR
  B. Firewall
  C. HIPS
  D. DLP
  D. DLP

• Question 250:

  A network analyst is setting up a wireless access point for a home office in a remote, rural location. The requirement is that users need to connect to the access point securely but do not want to have to remember passwords

  Which of the following should the network analyst enable to meet the requirement?

  A. MAC address filtering
  B. 802.1X
  C. Captive portal
  D. WPS
  D. WPS