CompTIA SY0-601 Online Practice Questions and Exam Preparation

CompTIA SY0-601 Online Questions & Answers

• Question 961:

  The help desk has received calls from users in multiple locations who are unable to access core network services The network team has identified and turned off the network switches using remote commands. Which of the following actions should the network team take NEXT?

  A. Disconnect all external network connections from the firewall
  B. Send response teams to the network switch locations to perform updates
  C. Turn on all the network switches by using the centralized management software
  D. Initiate the organization's incident response plan.
  D. Initiate the organization's incident response plan.

• Question 962:

  An organization is developing an authentication service for use at the entry and exit ports of country borders.

  1.

  The service will use data feeds obtained from passport systems, passenger manifests, and high-definition video feeds from CCTV systems that are located at the ports.

  2.

  The service will incorporate machine-learning techniques to eliminate biometric enrollment processes while still allowing authorities to identify passengers with increasing accuracy over time.

  3.

  The more frequently passengers travel, the more accurately the service will identify them.

  Which of the following biometrics will MOST likely be used, without the need for enrollment? (Choose two.)

  A. Voice
  B. Gait
  C. Vein
  D. Facial
  E. Retina
  F. Fingerprint
  B. Gait
  D. Facial

  ---

  Explanation Explanation/Reference:Most accurate according to the objectives

• Question 963:

  Which of the following describes a social engineering technique that seeks to exploit a person's sense of urgency?

  A. A phishing email stating a cash settlement has been awarded but will expire soon
  B. A smishing message stating a package is scheduled for pickup
  C. A vishing call that requests a donation be made to a local charity
  D. A SPIM notification claiming to be undercover law enforcement investigating a cybercrime
  A. A phishing email stating a cash settlement has been awarded but will expire soon

  ---

  A phishing email stating a cash settlement has been awarded but will expire soon describes a social engineering technique that seeks to exploit a person's sense of urgency. Social engineering is the use of psychological manipulation or deception to influence people to divulge sensitive information or take actions that may not be in their best interests. One common social engineering technique is to create a sense of urgency in the victim, often by using time-limited offers or other time-sensitive incentives. In this case, the phishing email claims that a cash settlement has been awarded, but will expire soon, creating a sense of urgency in the victim to take action. This may motivate the victim to click on a link or provide sensitive information, without fully considering the consequences.

• Question 964:

  Which of the following BEST describes a security exploit for which a vendor patch is not readily available?

  A. Integer overflow
  B. Zero-day
  C. End of life
  D. Race condition
  B. Zero-day

• Question 965:

  A security administrator needs to add fault tolerance and load balancing to the connection from the file server to the backup storage. Which of the following is the best choice to achieve this objective?

  A. Multipath
  B. RAID
  C. Segmentation
  D. 802.11
  A. Multipath

• Question 966:

  Which of the following best describes the process of adding a secret value to extend the length of stored passwords?

  A. Hashing
  B. Quantum communications
  C. Salting
  D. Perfect forward secrecy
  C. Salting

• Question 967:

  A company wants to reconfigure an existing wireless infrastructure. The company needs to ensure the projected WAP placement will provide proper signal strength to all workstations. Which of the following should the company use to best fulfill the requirements?

  A. Network diagram
  B. WPS
  C. 802.1X
  D. Heat map
  D. Heat map

  ---

  Explanation Explanation/Reference:

• Question 968:

  A security administrator performs weekly vulnerability scans on all cloud assets and provides a detailed report. Which of the following describes the administrator's activities?

  A. Continuous deployment
  B. Continuous integration
  C. Data owners
  D. Data processor
  D. Data processor

• Question 969:

  Which of the following will increase cryptographic security?

  A. High data entropy
  B. Algorithms that require less computing power
  C. Longer key longevity
  D. Hashing
  A. High data entropy

  ---

  Entropy is a measure of disorder. A plaintext will usually exhibit low entropy as it represents a message in a human language or programming language or data structure. The plaintext must be ordered for it to be intelligible to a person, computer processor, or database. One of the requirements of a strong cryptographic algorithm is to produce a disordered ciphertext. Put another way, the ciphertext must exhibit a high level of entropy. If any elements of order from the plaintext persist, it will make the ciphertext vulnerable to cryptanalysis, and the algorithm can be shown to be weak.

• Question 970:

  A security administrator needs to block a TCP connection using the corporate firewall, Because this connection is potentially a threat. the administrator not want to back an RST.

  Which of the following actions in rule would work best?

  A. Drop
  B. Reject
  C. Log alert
  D. Permit
  A. Drop

  ---

  the difference between drop and reject in firewall is that the drop target sends nothing to the source, while the reject target sends a reject response to the source. This can affect how the source handles the connection attempt and how fast the port scanning is. In this context, a human might say that the best action to block a TCP connection using the corporate firewall is A. Drop, because it does not send back an RST packet and it may slow down the port scanning and protect against DoS attacks.