SY0-601 Exam Details

  • Exam Code
    :SY0-601
  • Exam Name
    :CompTIA Security+
  • Certification
    :CompTIA Certifications
  • Vendor
    :CompTIA
  • Total Questions
    :1334 Q&As
  • Last Updated
    :May 26, 2026

CompTIA SY0-601 Online Questions & Answers

  • Question 371:

    A company recently experienced a significant data loss when proprietary information was leaked to a competitor. The company took special precautions by using proper labels; however, email filter logs do not have any record of the incident. An investigation confirmed the corporate network was not breached, but documents were downloaded from an employee's COPE tablet and passed to the competitor via cloud storage. Which of the following is the BEST remediation for this data leak?

    A. User training
    B. CASB
    C. MDM
    D. DLP

  • Question 372:

    A retail store has a business requirement to deploy a kiosk computer In an open area The kiosk computer's operating system has been hardened and tested. A security engineer IS concerned that someone could use removable media to install a rootkit. Which of the should the security engineer configure to BEST protect the kiosk computer?

    A. Measured boot
    B. Boot attestation
    C. UEFI
    D. EDR

  • Question 373:

    Which of the following best describes a threat actor who is attempting to use commands found on a public code repository?

    A. Script kiddie
    B. State actor
    C. Insider threat
    D. Competitor espionage

  • Question 374:

    A penetration tester gains access to a network by exploiting a vulnerability on a public- facing web server. Which of the following techniques will the tester most likely perform NEXT?

    A. Gather more Information about the target through passive reconnaissance.
    B. Establish rules of engagement before proceeding.
    C. Create a user account to maintain persistence.
    D. Move laterally throughout the network to search for sensitive information.

  • Question 375:

    A routine audit of medical billing claims revealed that several claims were submitted without the subscriber's knowledge. A review of the audit logs for the medical billing company's system indicated a company employee downloaded customer records and adjusted the direct deposit information to a personal bank account. Which of the following does this action describe?

    A. Insider threat
    B. Social engineering
    C. Third-party risk
    D. Data breach

  • Question 376:

    Which of the following can a security director use to prioritize vulnerability patching within a company's IT environment?

    A. SOAR
    B. CVSS
    C. SIEM
    D. CVE

  • Question 377:

    Some laptops recently went missing from a locked storage area that is protected by keyless RFID-enabled locks. There is no obvious damage to the physical space. The security manager identifies who unlocked the door, however, human resources confirms the employee was on vacation at the time of the incident. Which of the following describes what MOST likely occurred?

    A. The employee's physical access card was cloned.
    B. The employee is colluding with human resources
    C. The employee's biometrics were harvested
    D. A criminal used lock picking tools to open the door.

  • Question 378:

    A company wants to get alerts when others are researching and doing reconnaissance on the company. One approach would be to host a part of the infrastructure online with known vulnerabilities that would appear to be company assets. Which of the following describes this approach?

    A. Watering hole
    B. Bug bounty
    C. DNS sinkhole
    D. Honeypot

  • Question 379:

    An IT security manager requests a report on company information that is publicly available. The manager's concern is that malicious actors will be able to access the data without engaging in active reconnaissance. Which of the following is the MOST efficient approach to perform the analysis?

    A. Provide a domain parameter to theHarvester tool.
    B. Check public DNS entries using dnsenum.
    C. Perform a Nessus vulnerability scan targeting a public company's IP.
    D. Execute nmap using the options: scan all ports and sneaky mode.

  • Question 380:

    A company wants to deploy PKI on its Internet-facing website. The applications that are currently deployed are:

    1.

    www.company.com (main website)

    2.

    contactus.company.com (for locating a nearby location)

    3.

    quotes.company.com (for requesting a price quote)

    The company wants to purchase one SSL certificate that will work for all the existing applications and any future applications that follow the same naming conventions, such as store.company.com.

    Which of the following certificate types would BEST meet the requirements?

    A. SAN
    B. Wildcard
    C. Extended validation
    D. Self-signed

Tips on How to Prepare for the Exams

Nowadays, the certification exams become more and more important and required by more and more enterprises when applying for a job. But how to prepare for the exam effectively? How to prepare for the exam in a short time with less efforts? How to get a ideal result and how to find the most reliable resources? Here on Vcedump.com, you will find all the answers. Vcedump.com provide not only CompTIA exam questions, answers and explanations but also complete assistance on your exam preparation and certification application. If you are confused on your SY0-601 exam preparations and CompTIA certification application, do not hesitate to visit our Vcedump.com to find your solutions here.