CompTIA CompTIA Certifications SY0-601 Questions & Answers

• Question 271:

  A security analyst is assisting a team of developers with best practices for coding. The security analyst would like to defend against the use of SQL injection attacks. Which of the following should the security analyst recommend first?

  A. Tokenization

  B. Input validation

  C. Code signing

  D. Secure cookies

  Correct Answer: B

• Question 272:

  Cloud security engineers are planning to allow and deny access to specific features in order to increase data security. Which of the following cloud features is the most appropriate to ensure access is granted properly?

  A. API integrations

  B. Auditing

  C. Resource policies

  D. Virtual networks

  Correct Answer: C

• Question 273:

  A security analyst is investigating a report from a penetration test. During the penetration test, consultants were able to download sensitive data from a back-end server. The back-end server was exposing an API that should have only been available from the company's mobile application. After reviewing the back-end server logs, the security analyst finds the following entries:

  

  Which of the following is the most likely cause of the security control bypass?

  A. IP address allow list

  B. User-agent spoofing

  C. WAF bypass

  D. Referrer manipulation

  Correct Answer: B

• Question 274:

  A security analyst is investigating what appears to be unauthorized access to a corporate web application. The security analyst reviews the web server logs and finds the flowing entries:

  

  Which of the following password attacks is taking place?

  A. Dictionary

  B. Brute-force

  C. Rainbow table

  D. Spraying

  Correct Answer: B

• Question 275:

  A user reset the password for a laptop but has been unable to log in to it since then. In addition, several unauthorized emails were sent on the user's behalf recently. The security team investigates the issue and identifies the following findings:

  Firewall logs show excessive traffic from the laptop to an external site.

  Unknown processes were running on the laptop.

  RDP connections that appeared to be authorized were made to other network devices from the laptop.

  High bandwidth utilization alerts from that user's username.

  Which of the following is most likely installed on the laptop?

  A. Worm

  B. Keylogger

  C. Trojan

  D. Logic bomb

  Correct Answer: C

• Question 276:

  A security analyst has been tasked with ensuring all programs that are deployed into the enterprise have been assessed in a runtime environment. Any critical issues found in the program must be sent back to the developer for verification and remediation. Which of the following BEST describes the type of assessment taking place?

  A. Input validation

  B. Dynamic code analysis

  C. Fuzzing

  D. Manual code review

  Correct Answer: B

• Question 277:

  Which of the following BEST describes the process of documenting who has access to evidence?

  A. Order of volatility

  B. Chain of custody

  C. Non-repudiation

  D. Admissibility

  Correct Answer: B

• Question 278:

  A systems engineer wants to leverage a cloud-based architecture with low latency between network-connected devices that also reduces the bandwidth that is required by performing analytics directly on the endpoints.

  Which of the following would BEST meet the requirements? (Choose two.)

  A. Private cloud

  B. SaaS

  C. Hybrid cloud

  D. IaaS

  E. DRaaS

  F. Fog computing

  Correct Answer: CF

• Question 279:

  Which of the following is a policy that provides a greater depth and breadth of knowledge across an organization?

  A. Asset management policy

  B. Separation of duties policy

  C. Acceptable use policy

  D. Job rotation policy

  Correct Answer: D

• Question 280:

  A security engineer must deploy two wireless routers in an office suite. Other tenants in the office building should not be able to connect to this wireless network. Which of the following protocols should the engineer implement to ensure the STRONGEST encryption?

  A. WPS

  B. WPA2

  C. WAP

  D. HTTPS

  Correct Answer: B