Nest 0 Cart
Nest Account
Popular Exams
All Categories...
Nest
Nest 0
Contact
Log In / Sign Up
Copyright 2024 © store. All rights reserved.
Home CompTIA SY0-601

CompTIA SY0-601 Exam Practice Questions (P. 5)

  • Full Access (860 questions)
  • Six months of Premium Access
  • Access to one million comments
  • Seamless ChatGPT Integration
  • Ability to download PDF files
  • Anki Flashcard files for revision
  • No Captcha & No AdSense
  • Advanced Exam Configuration
Get Contributor Access
Question #41
A company wants to restrict emailing of PHI documents. The company is implementing a DLP solution. In order to restrict PHI documents, which of the following should be performed FIRST?
  1. A
    Retention
  2. B
    Governance
  3. C
    Classification
  4. D
    Change management

Correct Answer:
C

Question #42
A security analyst is investigating some users who are being redirected to a fake website that resembles www.comptia.org. The following output was found on the naming server of the organization:

Which of the following attacks has taken place?
  1. A
    Domain reputation
  2. B
    Domain hijacking
  3. C
    Disassociation
  4. D
    DNS poisoning

Correct Answer:
B

Question #43
Which of the following describes the continuous delivery software development methodology?
  1. A
    Waterfall
  2. B
    Spiral
  3. C
    V-shaped
  4. D
    Agile

Correct Answer:
D

Question #44
Which of the following is the BEST example of a cost-effective physical control to enforce a USB removable media restriction policy?
  1. A
    Putting security/antitamper tape over USB ports, logging the port numbers, and regularly inspecting the ports
  2. B
    Implementing a GPO that will restrict access to authorized USB removable media and regularly verifying that it is enforced
  3. C
    Placing systems into locked, key-controlled containers with no access to the USB ports
  4. D
    Installing an endpoint agent to detect connectivity of USB and removable media

Correct Answer:
B

Question #45
A company suspects that some corporate accounts were compromised. The number of suspicious logins from locations not recognized by the users is increasing.
Employees who travel need their accounts protected without the risk of blocking legitimate login requests that may be made over new sign-in properties. Which of the following security controls can be implemented?
  1. A
    Enforce MFA when an account request reaches a risk threshold.
  2. B
    Implement geofencing to only allow access from headquarters.
  3. C
    Enforce time-based login requests that align with business hours.
  4. D
    Shift the access control scheme to a discretionary access control.

Correct Answer:
A

Question #46
An organization wants to participate in threat intelligence information sharing with peer groups. Which of the following would MOST likely meet the organization's requirement?
  1. A
    Perform OSINT investigations.
  2. B
    Subscribe to threat intelligence feeds.
  3. C
    Submit RFCs.
  4. D
    Implement a TAXII server.

Correct Answer:
D

Question #47
Which of the following is the MOST effective control against zero-day vulnerabilities?
  1. A
    Network segmentation
  2. B
    Patch management
  3. C
    Intrusion prevention system
  4. D
    Multiple vulnerability scanners

Correct Answer:
C

Question #48
Which of the following is the GREATEST security concern when outsourcing code development to third-party contractors for an internet-facing application?
  1. A
    Intellectual property theft
  2. B
    Elevated privileges
  3. C
    Unknown backdoor
  4. D
    Quality assurance

Correct Answer:
C

Question #49
An organization has hired a red team to simulate attacks on its security posture. Which of the following will the blue team do after detecting an IoC?
  1. A
    Reimage the impacted workstations.
  2. B
    Activate runbooks for incident response.
  3. C
    Conduct forensics on the compromised system.
  4. D
    Conduct passive reconnaissance to gather information.

Correct Answer:
C

Question #50
An amusement park is implementing a biometric system that validates customers' fingerprints to ensure they are not sharing tickets. The park's owner values customers above all and would prefer customers' convenience over security. For this reason, which of the following features should the security team prioritize
FIRST?
  1. A
    Low FAR
  2. B
    Low efficacy
  3. C
    Low FRR
  4. D
    Low CER

Correct Answer:
C

Previous Questions Next Questions

All Pages