Nest 0 Cart
Nest Account
Popular Exams
All Categories...
Nest
Nest 0
Contact
Log In / Sign Up
Copyright 2024 © store. All rights reserved.
Home CompTIA SY0-601

CompTIA SY0-601 Exam Practice Questions (P. 4)

  • Full Access (860 questions)
  • Six months of Premium Access
  • Access to one million comments
  • Seamless ChatGPT Integration
  • Ability to download PDF files
  • Anki Flashcard files for revision
  • No Captcha & No AdSense
  • Advanced Exam Configuration
Get Contributor Access
Question #31
Which of the following would detect intrusions at the perimeter of an airport?
  1. A
    Signage
  2. B
    Fencing
  3. C
    Motion sensors
  4. D
    Lighting
  5. E
    Bollards

Correct Answer:
E

Question #32
A security analyst is concerned about critical vulnerabilities that have been detected on some applications running inside containers. Which of the following is the
BEST remediation strategy?
  1. A
    Update the base container Image and redeploy the environment.
  2. B
    Include the containers in the regular patching schedule for servers.
  3. C
    Patch each running container individually and test the application.
  4. D
    Update the host in which the containers are running.

Correct Answer:
B

Question #33
An organization has decided to purchase an insurance policy because a risk assessment determined that the cost to remediate the risk is greater than the five- year cost of the insurance policy. The organization is enabling risk:
  1. A
    avoidance.
  2. B
    acceptance.
  3. C
    mitigation.
  4. D
    transference.

Correct Answer:
D

Question #34
A security analyst receives an alert from the company's SIEM that anomalous activity is coming from a local source IP address of 192.168.34.26. The Chief
Information Security Officer asks the analyst to block the originating source. Several days later, another employee opens an internal ticket stating that vulnerability scans are no longer being performed properly. The IP address the employee provides is 192.168.34.26. Which of the following describes this type of alert?
  1. A
    True negative
  2. B
    True positive
  3. C
    False positive
  4. D
    False negative

Correct Answer:
A

Question #35
A security analyst wants to reference a standard to develop a risk management program. Which of the following is the BEST source for the analyst to use?
  1. A
    SSAE SOC 2
  2. B
    ISO 31000
  3. C
    NIST CSF
  4. D
    GDPR

Correct Answer:
C

Question #36
The Chief Information Security Officer (CISO) requested a report on potential areas of improvement following a security incident. Which of the following incident response processes is the CISO requesting?
  1. A
    Lessons learned
  2. B
    Preparation
  3. C
    Detection
  4. D
    Containment
  5. E
    Root cause analysis

Correct Answer:
A

Question #37
A company is providing security awareness training regarding the importance of not forwarding social media messages from unverified sources. Which of the following risks would this training help to prevent?
  1. A
    Hoaxes
  2. B
    SPIMs
  3. C
    Identity fraud
  4. D
    Credential harvesting

Correct Answer:
A

Question #38
A security analyst is receiving numerous alerts reporting that the response time of an internet-facing application has been degraded. However, the internal network performance was not degraded. Which of the following MOST likely explains this behavior?
  1. A
    DNS poisoning
  2. B
    MAC flooding
  3. C
    DDoS attack
  4. D
    ARP poisoning

Correct Answer:
C

Question #39
Which of the following will increase cryptographic security?
  1. A
    High data entropy
  2. B
    Algorithms that require less computing power
  3. C
    Longer key longevity
  4. D
    Hashing

Correct Answer:
A

Question #40
Which of the following statements BEST describes zero-day exploits?
  1. A
    When a zero-day exploit is discovered, the system cannot be protected by any means.
  2. B
    Zero-day exploits have their own scoring category in CVSS.
  3. C
    A zero-day exploit is initially undetectable, and no patch for it exists.
  4. D
    Discovering zero-day exploits is always performed via bug bounty programs.

Correct Answer:
C

Previous Questions Next Questions

All Pages