CompTIA SY0-601 Online Practice Questions and Exam Preparation

CompTIA SY0-601 Online Questions & Answers

• Question 341:

  A security analyst has received an alert about being sent via email. The analyst's Chief information Security Officer (CISO) has made it clear that PII must be handle with extreme care From which of the following did the alert MOST likely originate?

  A. S/MIME
  B. DLP
  C. IMAP
  D. HIDS
  B. DLP

  ---

  Network-based DLP monitors outgoing data looking for sensitive data. Network-based DLP systems monitor outgoing email to detect and block unauthorized data transfers and monitor data stored in the cloud.

• Question 342:

  An analyst is concerned about data leaks and wants to restrict access to internet services to authorized users only. The analyst also wants to control the actions each user can perform on each service. Which of the following would be the best technology for the analyst to consider Implementing?

  A. DLP
  B. VPC
  C. CASB
  D. Content filtering
  C. CASB

  ---

  CASB is a security solution that provides visibility and control over the use of cloud services by employees within an organization. It helps enforce security policies and ensures that access to internet services is restricted to authorized users only. CASB allows the organization to define granular policies based on users, devices, locations, and activities, enabling them to control the actions each user can perform on each cloud service. By deploying CASB, the analyst can gain better visibility into data usage and potential data leaks, and apply security policies to prevent unauthorized access and actions on internet services. This can help protect sensitive data and mitigate the risks associated with the use of cloud services within the organization.

• Question 343:

  A website visitor is required to provide properly formatted information in a specific field on a website form. Which of the following security measures is most likely used for this mandate?

  A. Input validation
  B. Code signing
  C. SQL injection
  D. Form submission
  A. Input validation

• Question 344:

  An organization is migrating several SaaS applications that support SSO. The security manager wants to ensure the migration is completed securely. Which of the following should the organization consider before implementation? (Select TWO).

  A. The back-end directory source
  B. The identity federation protocol
  C. The hashing method
  D. The encryption method
  E. The registration authority
  F. The certificate authority
  B. The identity federation protocol
  F. The certificate authority

• Question 345:

  Which of the following allows for functional test data to be used in new systems for testing and training purposes to protect the real data?

  A. Data encryption
  B. Data masking
  C. Data deduplication
  D. Data minimization
  B. Data masking

  ---

  The main reason for applying masking to a data field is to protect data that is classified as personally identifiable information, sensitive personal data, or commercially sensitive data. However, the data must remain usable for the purposes of undertaking valid test cycles. It must also look real and appear consistent. It is more common to have masking applied to data that is represented outside of a corporate production system. In other words, where data is needed for the purpose of application development, building program extensions and conducting various test cycles https://en.wikipedia.org/wiki/Data_masking

• Question 346:

  Certain users are reporting their accounts are being used to send unauthorized emails and conduct suspicious activities After further investigation, a security analyst notices the following

  1.

  All users share workstations throughout the day

  2.

  Endpoint protection was disabled on several workstations throughout the network.

  3.

  Travel times on logins from the affected users are impossible

  4.

  Sensitive data is being uploaded to external sites

  5.

  All usee account passwords were forced lo be reset and the issue continued

  Which of the following attacks is being used to compromise the user accounts?

  A. Brute-force
  B. Keylogger
  C. Dictionary
  D. Rainbow
  B. Keylogger

  ---

  Enduser protection is disabled and someone installed a keyloggers since workstations are being shared. Changing password doesn't uninstall this keylogger which is likely recording the new changed passwords and sending them out to the attacker.

• Question 347:

  The website http://companywebsite.com requires users to provide personal information, including security question responses, for registration. Which of the following would MOST likely cause a data breach?

  A. Lack of input validation
  B. Open permissions
  C. Unsecure protocol
  D. Missing patches
  C. Unsecure protocol

  ---

  Website is using HTTP which is the unsecure protocol of HTTP

• Question 348:

  A security analyst is responding to a malware incident at a company. The malware connects to a command-and-control server on the internet in order to function. Which of the following should the security analyst implement first?

  A. Network segmentation
  B. IP-based firewall rules
  C. Mobile device management
  D. Content filler
  B. IP-based firewall rules

• Question 349:

  During a forensic investigation, an analyst uses software to create a checksum of the affected subject's email file. Which of the following is the analyst practicing?

  A. Chain of custody
  B. Data recovery
  C. Non-repudiation
  D. Integrity
  D. Integrity

• Question 350:

  A financial analyst is expecting an email containing sensitive information from a client.

  When the email arrives, the analyst receives an error and is unable to open the encrypted message.

  Which of the following is the MOST likely cause of the issue?

  A. The S/MME plug-in is not enabled.
  B. The SLL certificate has expired.
  C. Secure IMAP was not implemented
  D. POP3S is not supported
  A. The S/MME plug-in is not enabled.

  ---

  Explanation Explanation/Reference:S/MIME provides for cryptographic security services such as authentication, message integrity, and non-repudiation of origin (using digital signatures). It also helps enhance privacy and data security (using encryption) for electronic messaging.