CompTIA SY0-601 Online Practice Questions and Exam Preparation

CompTIA SY0-601 Online Questions & Answers

• Question 521:

  A user reports falling for a phishing email to an analyst. Which of the following system logs would the analyst check FIRST?

  A. DNS
  B. Message gateway
  C. Network
  D. Authentication
  A. DNS

• Question 522:

  Which of the following environments utilizes a subset of customer data and is most likely to be used to assess the impacts of major system upgrades and demonstrate system features?

  A. Development
  B. Test
  C. Production
  D. Staging
  D. Staging

• Question 523:

  Server administrators want to configure a cloud solution so that computing memory and processor usage is maximized most efficiently across a number or virtual servers. They also need to avoid potential dental-of-service situations caused by availability. Which of the following should administrators configure to maximize system availability while efficiently utilizing available computing power?

  A. Dynamic resource allocation
  B. High availably
  C. Segmentation
  D. Container security
  A. Dynamic resource allocation

  ---

  To maximize system availability and efficiently utilize available computing power, administrators should configure dynamic resource allocation. Dynamic resource allocation is a technique that allows a system to automatically adjust the allocation of resources, such as memory and processing power, to different applications or processes in response to changing workloads or conditions. This can help to ensure that computing resources are used efficiently and that the system is able to respond to changes in demand without encountering performance issues or becoming unavailable.

• Question 524:

  A security analyst is tasked with defining the "something you are" factor of the company's MFA settings. Which of the following is BEST to use to complete the configuration?

  A. Gait analysis
  B. Vein
  C. Soft token
  D. HMAC-based, one-time password
  B. Vein

  ---

  Vein is the unique possible response. According to Comptia Security All in one book, Gait Analysis is never used for authentication. It's only used to identify a suspect in a group of others, enabling tracking of individuals in a crowd.

• Question 525:

  A company recently implemented a patch management policy; however, vulnerability scanners have still been flagging several hosts, even after the completion of the patch process. Which of the following is the most likely cause of the issue?

  A. The vendor firmware lacks support.
  B. Zero-day vulnerabilities are being discovered.
  C. Third-party applications are not being patched.
  D. Code development is being outsourced.
  C. Third-party applications are not being patched.

  ---

  Third-party applications are applications that are developed and provided by external vendors or sources, rather than by the organization itself. Third-party applications may introduce security risks if they are not properly vetted, configured, or updated. One of the most likely causes of vulnerability scanners flagging several hosts after the completion of the patch process is that third-party applications are not being patched. Patching is the process of applying updates or fixes to software to address bugs, vulnerabilities, or performance issues. Patching third-party applications is essential for maintaining their security and functionality, as well as preventing attackers from exploiting known flaws. References: https://www.comptia.org/certifications/security#examdetails https://www.comptia.org/content/guides/comptia-security-sy0-601-exam-objectives https://www.csoonline.com/article/2124681/why-third-party-security-is-your-security.html

• Question 526:

  A security architect is designing a remote access solution for a business partner. The business partner needs to access one Linux server at the company. The business partner wants to avoid managing a password for authentication and additional software installation. Which of the following should the architect recommend?

  A. Soft token
  B. Smart card
  C. CSR
  D. SSH key
  D. SSH key

• Question 527:

  A company that provides an online streaming service made its customers' personal data including names and email addresses publicly available in a cloud storage service. As a result, the company experienced an increase m the number of requests to delete user accounts. Which of the following best describes the consequence of tins data disclosure?

  A. Regulatory tines
  B. Reputation damage
  C. Increased insurance costs
  D. Financial loss
  B. Reputation damage

  ---

  Reputation damage Short Reputation damage is the loss of trust or credibility that a company suffers when its customers' personal data is exposed or breached. This can lead to customer dissatisfaction, loss of loyalty, and requests to delete user accounts. References: https://www.comptia.org/content/guides/what-is-cybersecurity

• Question 528:

  The Chief Information Security Officer (CISO) has decided to reorganize security staff to concentrate on incident response and to outsource outbound Internet URL categorization and filtering to an outside company. Additionally, the CISO would like this solution to provide the same protections even when a company laptop or mobile device is away from a home office. Which of the following should the CISO choose?

  A. CASB
  B. Next-generation SWG
  C. NGFW
  D. Web-application firewall
  B. Next-generation SWG

• Question 529:

  After a recent ransomware attack on a company's system, an administrator reviewed the log files. Which of the following control types did the administrator use?

  A. Compensating
  B. Detective
  C. Preventive
  D. Corrective
  B. Detective

  ---

  The administrator used detective controls by reviewing the log files after the ransomware attack. Detective controls are designed to detect and identify potential security incidents or policy violations that may have occurred within an organization's systems or network. In this case, the log files were analyzed to identify signs of the ransomware attack and understand how the incident occurred. Detective controls help in identifying security breaches or other issues so that appropriate actions can be taken to respond to and mitigate the impact of the incident. They are an essential part of a comprehensive cybersecurity strategy, alongside preventive and corrective controls.

• Question 530:

  A large enterprise has moved all Hs data to the cloud behind strong authentication and encryption A sales director recently had a laptop stolen and later, enterprise data was round to have been compromised database.

  Which of the following was the MOST likely cause?

  A. Shadow IT
  B. Credential stuffing
  C. SQL injection
  D. Man-in-the-browser
  E. Bluejacking
  A. Shadow IT

  ---

  While SQL Injection might be one way that enterprise data from the local database was compromised, an attacker could simple have hacked into the person machine and opened up the local database to steal the data. SQL Injection is possible, but is not MOST Likely. You need to ask the question: If the enterprise has moved everything into the cloud, then the only reason there is a local database on the person's machine is because they installed the database. They installed an application on their local machine when they should have been using an application on the company's cloud. That, in its definition, is shadow IT.