CompTIA SY0-601 Online Practice Questions and Exam Preparation

CompTIA SY0-601 Online Questions & Answers

• Question 471:

  A security engineer has enabled two-factor authentication on all workstations. Which of the following approaches are the MOST secure? (Select TWO).

  A. Password and security question
  B. Password and CAPTCHA
  C. Password and smart card
  D. Password and fingerprint
  E. Password and one-time token
  F. Password and voice
  C. Password and smart card
  D. Password and fingerprint

  ---

  Explanation Explanation/Reference:couldn't be E because the word everyone is missing is TIME BASED one time Token. where after a certain time the token expires. On one-time token, it relies for the token to be Authenticated to expire, if it never gets authenticated it can still be used later. Two-factor/MFA requires two different forms of either (1) something you know (2) something you have, or (3) something you are. It cannot be two of the same.

• Question 472:

  A security engineer is hardening existing solutions to reduce application vulnerabilities. Which of the following solutions should the engineer implement FIRST? (Select TWO)

  A. Auto-update
  B. HTTP headers
  C. Secure cookies
  D. Third-party updates
  E. Full disk encryption
  F. Sandboxing
  G. Hardware encryption
  A. Auto-update
  G. Hardware encryption

  ---

  In a general context where the goal is to reduce application vulnerabilities, it's reasonable to prioritize measures that address common software vulnerabilities and protect against potential threats. Sandboxing often takes priority because it directly mitigates application-related vulnerabilities and helps prevent malicious code or actions within an application from affecting the broader system. Full disk encryption, while important for data security, primarily addresses data-at-rest protection.While valuable, it doesn't directly reduce application vulnerabilities

• Question 473:

  Employees in the research and development business unit receive extensive training to ensure they understand how to best protect company data. Which of the following is the type of data these employees are most likely to use in day to-day work activities?

  A. Encrypted
  B. Intellectual property
  C. Critical
  D. Data in transit
  B. Intellectual property

  ---

  Intellectual property refers to creations of the mind, such as inventions, literary and artistic works, designs, symbols, names, and images used in commerce. In an RandD context, this could encompass everything from new product designs to innovative software algorithms. Protecting intellectual property is vital to maintain a company's competitive advantage and to prevent unauthorized use or copying.

• Question 474:

  Security analysts have noticed the network becomes flooded with malicious packets at specific times of the day. Which of the following should the analysts use to investigate this issue?

  A. Web metadata
  B. Bandwidth monitors
  C. System files
  D. Correlation dashboards
  B. Bandwidth monitors

• Question 475:

  he SIEM at an organization has detected suspicious traffic coming from a workstation in its internal network. An analyst in the SOC investigates the workstation and discovers malware that is associated with a botnet is installed on the device. A review of the logs on the workstation reveals that the privileges of the local account were escalated to a local administrator. To which of the following groups should the analyst report this real-world event?

  A. The NOC team
  B. The vulnerability management team
  C. The CIRT
  D. The red team
  C. The CIRT

  ---

  Explanation Explanation/Reference:its CIRT Also known as a "computer incident response team," this group is responsible for responding to security breaches, viruses and other potentially catastrophic events . The NOC is network operations center , a centralized location where IT teams can continuously monitor the performance and health of a network(far away form incident responce

• Question 476:

  A local server recently crashed, and the team is attempting to restore the server from a backup. During the restore process, the team notices the file size of each daily backup is large and will run out of space at the current rate.

  The current solution appears to do a full backup every night.

  Which of the following would use the LEAST amount of storage space for backups?

  A. Aweekly, incremental backup with daily differential backups
  B. Aweekly, full backup with daily snapshot backups
  C. Aweekly, full backup with daily differential backups
  D. Aweekly, full backup with daily incremental backups
  D. Aweekly, full backup with daily incremental backups

• Question 477:

  After multiple on premises security solutions were migrated to the cloud, the incident response time increased. The analyst are spending a long time to trace information on different cloud consoles and correlating data in different formats. Which of the following can be used to optimize the incident response time?

  A. CASB
  B. VPC
  C. SWG
  D. CMS
  A. CASB

  ---

  CASB vs SWG CASB is the more optimal solution for multiple on premises security solutions CASB services are explicitly designed to fit the needs of large enterprises You can access link and read about it: https://www.gend.co/blog/casb-or-swg-which-is-best-option-for-your-enterprise

• Question 478:

  The president of a regional bank likes to frequently provide SOC tours to potential investors. Which of the following policies BEST reduces the risk of malicious activity occurring after a tour?

  A. Password complexity
  B. Acceptable use
  C. Access control
  D. Clean desk
  D. Clean desk

  ---

  Explanation Explanation/Reference:A malicious investor would not be able to take advantage of anything gained until after the tour if the swiped a USB, looked at or stole documents. If their was a clean desk policy then that would prevent issues after a tour.

• Question 479:

  A company would like to move to the cloud. The company wants to prioritize control and security over cost and ease of management. Which of the following cloud models would best suit this company's priorities?

  A. Public
  B. Hybrid
  C. Community
  D. Private
  D. Private

  ---

  A private cloud model would best suit the company's priorities of control and security over cost and ease of management. In a private cloud, the infrastructure is dedicated to a single organization, providing greater control over the environment and the ability to implement strict security measures. This is in contrast to public, community, or hybrid cloud models, where resources are shared among multiple organizations, potentially compromising control and security. While private clouds can be more expensive and more difficult to manage, they the highest level of control and security for the company. - CompTIA Security+ Certification Exam Objectives (SY0-601), Section 3.2: "Explain the importance of secure staging deployment concepts." - Cisco: Private Cloud - https://www.cisco.com/c/en/us/solutions/cloud/private-cloud.html

• Question 480:

  An attacker is exploiting a vulnerability that does not have a patch available. Which of the following is the attacker exploiting?

  A. Zero-day
  B. Default permissions
  C. Weak encryption
  D. Unsecure root accounts
  A. Zero-day