SY0-601 Dumps with Practice Exam Questions Answers
SY0-601 by CompTIA Security+ Actual Free Exam Practice Test
Governance, Compliance, and Risk (14%)
- Describe the concepts of sensitive data and privacy as they relate to security.
- Describe the significance of applicable standards, frameworks, or standards that affect the security posture of an organization;
- Compare and contrast different types of controls;
- Describe the significance of policies to the security of an organization;
- Summarize the concepts and processes of risk management;
Although these topics are extensive, the students can pass the CompTIA SY0-601 exam at the first attempt. To ensure your success, it is critical to dedicate ample time to exploring these objectives with appropriate resources. To get started with your preparation, you should check the official webpage. You will find instructor-led training courses, video tutorials, study guides, virtual labs, and other tools.
CompTIA SY0-601: Target Audience
The candidates for this exam are the IT specialists looking to validate their information security skills and knowledge. The test is designed for those individuals who want to take up the job roles in the field of cybersecurity and need the CompTIA Security+ certification to boost their resume and increase their chance of getting a desired position.
NEW QUESTION 22
An incident, which is affecting dozens of systems, involves malware that reaches out to an Internet service for rules and updates. The IP addresses for the Internet host appear to be different in each case. The organization would like to determine a common IoC to support response and recovery actions. Which of the following sources of information would BEST support this solution?
- A. Browser cache
- B. Antivirus
- C. Web log files
- D. DNS query logs
Answer: D
NEW QUESTION 23
When used at the design stage, which of the following improves the efficiency, accuracy, and speed of a database?
- A. Obfuscation
- B. Data masking
- C. Normalization
- D. Tokenization
Answer: C
NEW QUESTION 24
Which of the following would be BEST for a technician to review to determine the total risk an organization can bear when assessing a "cloud-first" adoption strategy?
- A. Risk tolerance
- B. Risk matrix
- C. Risk appetite
- D. Risk register
Answer: A
NEW QUESTION 25
When selecting a technical solution for identity management, an architect chooses to go from an in-house to a third-party SaaS provider. Which of the following risk management strategies is this an example of?
- A. Mitigation
- B. Acceptance
- C. Avoidance
- D. Transference
Answer: D
Explanation:
Explanation
Risk Transference refers to the shifting of the burden of loss for a risk to another party through legislation, contract, insurance or other means. https://www.bcmpedia.org/wiki/Risk_Transference
NEW QUESTION 26
A company was recently breached Part of the company's new cybersecurity strategy is to centralize the logs from all security devices Which of the following components forwards the logs to a central source?
- A. Log aggregation
- B. Log collector
- C. Log parser
- D. Log enrichment
Answer: B
NEW QUESTION 27
Which of the following disaster recovery tests is The LEAST time-consuming for the disaster recovery team?
- A. Full interruption
- B. Parallel
- C. Tabletop
- D. Simulation
Answer: C
NEW QUESTION 28
After segmenting the network, the network manager wants to control the traffic between the segments. Which of the following should the manager use to control the network traffic?
- A. A VLAN
- B. A VPN
- C. A DMZ
- D. An ACL
Answer: A
NEW QUESTION 29
A company recently added a DR site and is redesigning the network. Users at the DR site are having issues browsing websites.
INSTRUCTIONS
Click on each firewall to do the following:
* Deny cleartext web traffic.
* Ensure secure management protocols are used.
* Resolve issues at the DR site.
The ruleset order cannot be modified due to outside constraints.
If at any time you would like to bring back the initial state of the simulation, please click the Reset All button.
Answer:
Explanation:
See explanation below.
Explanation
Firewall 1:
DNS Rule - ANY --> ANY --> DNS --> PERMIT
HTTPS Outbound - 10.0.0.1/24 --> ANY --> HTTPS --> PERMIT
Management - ANY --> ANY --> SSH --> PERMIT
HTTPS Inbound - ANY --> ANY --> HTTPS --> PERMIT
HTTP Inbound - ANY --> ANY --> HTTP --> DENY
Firewall 2:
Firewall 3:
DNS Rule - ANY --> ANY --> DNS --> PERMIT
HTTPS Outbound - 192.168.0.1/24 --> ANY --> HTTPS --> PERMIT
Management - ANY --> ANY --> SSH --> PERMIT
HTTPS Inbound - ANY --> ANY --> HTTPS --> PERMIT
HTTP Inbound - ANY --> ANY --> HTTP --> DENY
NEW QUESTION 30
A company recently experienced an attack in which a malicious actor was able to exfiltrate data by cracking stolen passwords, using a rainbow table the sensitive dat a. Which of the following should a security engineer do to prevent such an attack in the future?
- A. Use password hashing.
- B. Enforce password complexity.
- C. Implement password salting.
- D. Disable password reuse.
Answer: D
NEW QUESTION 31
A company's bank has reported that multiple corporate credit cards have been stolen over the past several weeks. The bank has provided the names of the affected cardholders to the company's forensics team to assist in the cyber-incident investigation.
An incident responder learns the following information:
* The timeline of stolen card numbers corresponds closely with affected users making Internet-based purchases from diverse websites via enterprise desktop PCs.
* All purchase connections were encrypted, and the company uses an SSL inspection proxy for the
* inspection of encrypted traffic of the hardwired network.
* Purchases made with corporate cards over the corporate guest WiFi network, where no SSL inspection occurs, were unaffected.
Which of the following is the MOST likely root cause?
- A. The SSL inspection proxy is feeding events to a compromised SIEM
- B. HTTPS sessions are being downgraded to insecure cipher suites
- C. The adversary has not yet established a presence on the guest WiFi network
- D. The payment providers are insecurely processing credit card charges
Answer: D
NEW QUESTION 32
A network analyst is setting up a wireless access point for a home office in a remote, rural location. The requirement is that users need to connect to the access point securely but do not want to have to remember passwords Which of the following should the network analyst enable to meet the requirement?
- A. WPS
- B. 802.1X
- C. MAC address filtering
- D. Captive portal
Answer: A
NEW QUESTION 33
The security administrator has installed a new firewall which implements an implicit DENY policy by default.
- A. INSTRUCTIONS:
Click on the firewall and configure it to allow ONLY the following communication.
1. The Accounting workstation can ONLY access the web server on the public network over the default HTTPS port. The accounting workstation should not access other networks.
2. The HR workstation should be restricted to communicate with the Financial server ONLY, over the default SCP port
3. The Admin workstation should ONLY be able to access the servers on the secure network over the default TFTP port.
Instructions: The firewall will process the rules in a top-down manner in order as a first match The port number must be typed in and only one port number can be entered per rule Type ANY for all ports. The original firewall configuration can be reset at any time by pressing the reset button. Once you have met the simulation requirements, click save and then Done to submit.
Hot Area:
Section: Network Security
Answer:
Explanation:
Implicit deny is the default security stance that says if you aren't specifically granted access or privileges for a resource, you're denied access by default.
Rule #1 allows the Accounting workstation to ONLY access the web server on the public network over the default HTTPS port, which is TCP port 443.
Rule #2 allows the HR workstation to ONLY communicate with the Financial server over the default SCP port, which is TCP Port 22 Rule #3 & Rule #4 allow the Admin workstation to ONLY access the Financial and Purchasing servers located on the secure network over the default TFTP port, which is Port 69.
References:
Stewart, James Michael, CompTIA Security+ Review Guide, Sybex, Indianapolis, 2014, pp. 26, 44 http://en.wikipedia.org/wiki/List_of_TCP_and_UDP_port_numbers References:
Stewart, James Michael, CompTIA Security+ Review Guide, Sybex, Indianapolis, 2014, pp. 26, 44 http://en.wikipedia.org/wiki/List_of_TCP_and_UDP_port_numbers
NEW QUESTION 34
A security analyst needs to generate a server certificate to be used for 802.1X and secure RDP connections. The analyst is unsure what is required to perform the task and solicits help from a senior colleague. Which of the following is the FIRST step the senior colleague will most likely tell the analyst to perform to accomplish this task?
- A. Generate a .pfx file
- B. Create an OCSP
- C. Generate a CSR
- D. Create a CRL
Answer: C
NEW QUESTION 35
Developers are writing code and merging it into shared repositories several times a day, where it is tested automatically. Which of the following concepts does this BEST represent?
- A. Continuous integration
- B. Functional testing
- C. Stored procedures
- D. Elasticity
Answer: A
Explanation:
https://www.cloudbees.com/continuous-delivery/continuous-integration#:~:text=Continuous%20Integration%20(CI)%20is%20a,automated%20build%20and%20automated%20tests.
Continuous Integration (CI) is a development practice where developers integrate code into a shared repository frequently, preferably several times a day. Each integration can then be verified by an automated build and automated tests.
NEW QUESTION 36
Select the appropriate attack andremediation from each drop-down list to label the corresponding attack with its remediation.
INSTRUCTIONS
Not all attacks and remediation actions will be used.
If at any time you would like to bring back the initial state of the simulation, pleaseclick the Reset All button.
Answer:
Explanation:
NEW QUESTION 37
A newly purchased corporate WAP needs to be configured in the MOST secure manner possible.
INSTRUCTIONS
Please click on the below items on the network diagram and configure them accordingly:
* WAP
* DHCP Server
* AAA Server
* Wireless Controller
* LDAP Server
If at any time you would like to bring back the initial state of the simulation, please click the Reset All button.
Answer:
Explanation:
Explanation
Wireless Access Point
Network Mode - G only
Wireless Channel - 11
Wireless SSID Broadcast - disable
Security settings - WPA2 Professional
NEW QUESTION 38
A security administrator is trying to determine whether a server is vulnerable to a range of attacks. After using a tool, the administrator obtains the following output:
Which of the following attacks was successfully implemented based on the output?
- A. Memory leak
- B. SQL injection
- C. Race conditions
- D. Directory traversal
Answer: D
NEW QUESTION 39
The
website http://companywebsite.com requires users to provide personal information including security responses, for registration. which of the following would MOST likely cause a date breach?
- A. LACK OF INPUT VALIDATION
- B. MISSING PATCHES
- C. OPEN PERMISSIONS
- D. UNSCECURE PROTOCOL
Answer: A
NEW QUESTION 40
Joe, a user at a company, clicked an email link led to a website that infected his workstation. Joe, was connected to the network, and the virus spread to the network shares. The protective measures failed to stop this virus, and It has continues to evade detection. Which of the following should administrator implement to protect the environment from this malware?
- A. Implement CASB to protect the network shares.
- B. Install a definition-based antivirus.
- C. Implement a heuristic behavior-detection solution.
- D. Implement an IDS/IPS
Answer: C
Explanation:
Explanation
Heuristic analysis is also one of the few methods capable of combating polymorphic viruses - the term for malicious code that constantly changes and adapts. Heuristic analysis is incorporated into advanced security solutions offered by companies like Kaspersky Labs to detect new threats before they cause harm, without the need for a specific signature. https://usa.kaspersky.com/resource-center/definitions/heuristic-analysis
NEW QUESTION 41
......
Free CompTIA Security+ SY0-601 Exam Question: https://www.testkingpass.com/SY0-601-testking-dumps.html
SY0-601 dumps & CompTIA Security+ sure practice dumps: https://drive.google.com/open?id=1qbGXumFloEAGibAv8_6gMV1MArd4cWTW