CompTIA SY0-601 Online Practice Questions and Exam Preparation

CompTIA SY0-601 Online Questions & Answers

• Question 551:

  A user is concerned that a web application will not be able to handle unexpected or random input without crashing. Which of the following BEST describes the type of testing the user should perform?

  A. Code signing
  B. Fuzzing
  C. Manual code review
  D. Dynamic code analysis
  B. Fuzzing

• Question 552:

  Users are presented with a banner upon each login to a workstation. The banner mentions that users are not entitled to any reasonable expectation of privacy and access is for authorized personnel only. In order to proceed past that banner. users must click the OK button. Which of the following is this an example of?

  A. AUP
  B. NDA
  C. SLA
  D. MOU
  A. AUP

  ---

  Explanation Explanation/Reference:An acceptable use policy (AUP) is a document that outlines the rules and restrictions employees must follow in regard to the company's network, software, internet connection and devices.

• Question 553:

  An organization is concerned about hackers bypassing MFA through social engineering of phone carriers. Which of the following would most likely protect against such an attack?

  A. Receiving alerts about unusual log-in activity
  B. Receiving a six-digit code via SMS
  C. Receiving a push notification to a mobile application
  D. Receiving a phone call for automated approval
  C. Receiving a push notification to a mobile application

• Question 554:

  A Chief Security Office's (CSO's) key priorities are to improve preparation, response, and recovery practices to minimize system downtime and enhance organizational resilience to ransomware attacks. Which of the following would BEST meet the CSO's objectives?

  A. Use email-filtering software and centralized account management, patch high-risk systems, and restrict administration privileges on fileshares.
  B. Purchase cyber insurance from a reputable provider to reduce expenses during an incident.
  C. Invest in end-user awareness training to change the long-term culture and behavior of staff and executives, reducing the organization's susceptibility to phishing attacks.
  D. Implement application whitelisting and centralized event-log management, and perform regular testing and validation of full backups.
  D. Implement application whitelisting and centralized event-log management, and perform regular testing and validation of full backups.

• Question 555:

  Which of the following are the BEST ways to implement remote home access to a company's intranet systems if establishing an always-on VPN is not an option? (Select Two)

  A. Install VPN concentrations at home offices
  B. Create NAT on the firewall for intranet systems
  C. Establish SSH access to a jump server
  D. Implement a SSO solution
  E. Enable MFA for intranet systems
  F. Configure SNMPv3 server and clients.
  A. Install VPN concentrations at home offices
  E. Enable MFA for intranet systems

• Question 556:

  A security analyst reviews a company's authentication logs and notices multiple authentication failures. The authentication failures are from different usernames that share the same source IP address. Which of the password attacks is MOST likely happening?

  A. Dictionary
  B. Rainbow table
  C. Spraying
  D. Brute-force
  D. Brute-force

• Question 557:

  Which of the following security concepts should an e-commerce organization apply for protection against erroneous purchases?

  A. Privacy
  B. Availability
  C. Integrity
  D. Confidentiality
  C. Integrity

• Question 558:

  A company acquired several other small companies The company thai acquired the others is transitioning network services to the cloud The company wants to make sure that performance and security remain intact Which of the following BEST meets both requirements?

  A. High availability
  B. Application security
  C. Segmentation
  D. Integration and auditing
  C. Segmentation

  ---

  Explanation Explanation/Reference:Only Segmentation addresses both performance and security when incorporating a few networks into 1.

• Question 559:

  The Chief Information Security Officer wants to put security measures in place to protect PH. The organization needs to use its existing labeling and classification system to accomplish this goal. Which of the following would most likely be configured to meet the requirements?

  A. Tokenization
  B. S/MIME
  C. DLP
  D. MFA
  C. DLP

• Question 560:

  Which of the following will MOST likely adversely impact the operations of unpatched traditional programmable-logic controllers, running a back-end LAMP server and OT systems with human-management interfaces that are accessible over the Internet via a web interface? (Choose two.)

  A. Cross-site scripting
  B. Data exfiltration
  C. Poor system logging
  D. Weak encryption
  E. SQL injection
  F. Server-side request forgery
  A. Cross-site scripting
  E. SQL injection

  ---

  talking about web based security