CompTIA CompTIA Certifications SY0-601 Questions & Answers

• Question 941:

  Which of the following would a European company interested in implementing a technical, hands-on set of security standards MOST likely choose?

  A. GOPR

  B. CIS controls

  C. ISO 27001

  D. Is0 37000

  Correct Answer: A

• Question 942:

  A security analyst is reviewing the following command-line output:

  

  Which of the following Is the analyst observing?

  A. IGMP spoofing

  B. URL redirection

  C. MAG address cloning

  D. DNS poisoning

  Correct Answer: C

  ICMP Spoofing == changing the IP address of your network packets so that they appear to come from another IP address.

• Question 943:

  An end user reports a computer has been acting slower than normal for a few weeks, During an investigation, an analyst determines the system 3 sending the users email address and a ten-digit number ta an IP address once a day. The only resent log entry regarding the user's computer is the following:

  

  Which of the following is the MOST likely cause of the issue?

  A. The end user purchased and installed a PUP from a web browser

  B. A bot on the computer is brute forcing passwords against a website

  C. A hacker is attempting to exfiltrate sensitive data

  D. Ransomware is communicating with a command-and-control server.

  Correct Answer: A

• Question 944:

  A security analyst is reviewing a penetration-testing report from a third-party contractor. The penetration testers used the organization's new API to bypass a driver to perform privilege escalation on the organization's web servers. Upon looking at the API, the security analyst realizes the particular API call was to a legacy system running an outdated OS.

  Which of the following is the MOST likely attack type?

  A. Request forgery

  B. Session replay

  C. DLL injection

  D. Shimming

  Correct Answer: D

  D - Shimming. For the simple reason that a "driver" was mentioned. https://youtu.be/yQb2A-KoA6Y

• Question 945:

  An attacker is attempting to harvest user credentials on a client's website. A security analyst notices multiple attempts of random usernames and passwords.

  When the analyst types in a random username and password, the logon screen displays the following message:

  The username you entered does not exist.

  Which of the following should the analyst recommend be enabled?

  A. Input validation

  B. Obfuscation

  C. Error handling

  D. Username lockout

  Correct Answer: C

• Question 946:

  A financial nstitution wauid like to stare its customer data in a coud but still allaw the data ta he accessed and manipulated while encrypted. Doing so would prevent the claud servine provider from heing adle ta decipher the data due ta its sensitivity. The financial institutan is not concernec about computational averheads and slow speeds, Which of the follawing cryotographic techniques would BEST meet the requirement?

  A. Asymmatric

  B. Symmetric

  C. Homeomorphic

  D. Ephemeral

  Correct Answer: C

• Question 947:

  A security analyst needs to find real-time data on the latest malware and IoCs. Which of the following BEST describes the solution the analyst should pursue?

  A. Advisories and bulletins

  B. Threat feeds

  C. Security news articles

  D. Peer-reviewed content

  Correct Answer: B

  also referred as threat intelligence feeds

• Question 948:

  A financial institution would like to stare is customer data a could but still allow the data ta he accessed and manipulated while encrypted. Doing se would prevent the cloud service provider from being able to decipher the data due to its sensitivity. The financial institution is not concern about computational overheads and slow speeds,

  Which of the following cryptographic techniques would BEST meet the requirement?

  A. Asymmatric

  B. Symmetric

  C. Homeomorphic

  D. Ephemeral

  Correct Answer: C

• Question 949:

  A multinational organization that offers web-based services has datacenters that are located only in the United States; however, a large number of its customers are in Australia, Europe, and China. Payments for services are managed by a third party in the United Kingdom that specializes in payment gateways. The management team is concerned the organization is not compliant with privacy laws that cover some of its customers. Which of the following frameworks should the management team follow?

  A. Payment Card Industry Data Security Standard

  B. Cloud Security Alliance Best Practices

  C. ISO/IEC 27032 Cybersecurity Guidelines

  D. General Data Protection Regulation

  Correct Answer: D

  For example, the GDPR does not apply to US ( in this case Datacenters) data subjects, but it does apply to US companies that collect or process personal data from people in countries of the EU.And in this case, there are a lof of clients in Europe, China and Australia.

• Question 950:

  Which of the following should a data owner require all personnel to sign to legally protect intellectual property?

  A. An NDA

  B. An AUP

  C. An ISA

  D. An MOU

  Correct Answer: A