CompTIA Security+ (2020 series)856 questions across 86 pages are complete and free, with no account or card.
856 questions in this bank
Free access · progress saved on this device
A user received an SMS on a mobile phone that asked for bank details. Which of the following social-engineering techniques was used in this case?
Answer: D
I go with D. SPIM is unwanted messages sent over instant messaging (IM) channels, Vishing is VOIP, Spear phishing is targeting a specific group or individual via email.
Source: Adapted from community discussion — omodara
A company is working on mobile device security after a report revealed that users granted non-verified software access to corporate data. Which of the following is the MOST effective security control to mitigate this risk?
Answer: A
From my understanding and previous experience managing MDM, I believe the "non-verified" part of the question is referring to the company itself not verifying. For example, someone installs Facebook from the app store and allows it access to the photos app that contains company images. Facebook is a verified app in all app stores but would be considered a non verified application to the company because they didn't approve of the install. Therefor blocking access to the app store will keep them from installed applications they haven't approved. Assuming the device is a personal device and user can go online and download applications outside of the app store is reading too much into the question. Look at what it asked specifically.
Source: Adapted from community discussion — its_melly
A company is auditing the manner in which its European customers' personal information is handled. Which of the following should the company consult?
Answer: A
Answer: GDPR - General Data Protection Regulation is a regulation in EU laws that requires businesses to protect the personal data and privacy of EU citizens for transactions that occur within EU member states. ============================== Other Choices: ISO (International Organization for Standardization) - An independent, non-governmental organization that develops standards to ensure the quality, safety and efficiency of products, services and systems. NIST (National Institute of Standards and Technology) - A non-regulatory US government agency created to develop cybersecurity standards, guidelines, best practices, and other resources to meet the needs of U.S. industry, federal agencies and the broader public. PCI DSS (Payment Card Industry Data Security Standard) - A set of security standards for organizations that handle credit cards from major card schemes.
Source: Adapted from community discussion — rodwave
A security analyst needs to implement security features across smartphones, laptops, and tablets. Which of the following would be the MOST effective across heterogeneous platforms?
Answer: D
"MDM - Use a mobile device management (MDM) product to help centrally manage the security of smart phones, tablets, and laptops. With MDM, you can enforce policies (such as ensuring password requirements on devices), approve applications for use, incorporate remote wipe functionality if the device is lost or stolen, and remotely lock the device." -Comptia Security+ Bundle Fourth Edition SY0-601 by Glen Clarke & Dan Lachance
Source: Adapted from community discussion — LeonardSnart
The new Chief Information Security Officer at a company has asked the security team to implement stronger user account policies. The new policies require: * Users to choose a password unique to their last ten passwords * Users to not log in from certain high-risk countries Which of the following should the security team implement? (Choose two.)
Answer: BD
Gelocation is not correct because geolocation stands for the location within a company, example: a certain VLAN, ip address range, so on. While geofencing is the correct term in this scenario since it limit the physical area of the authentication, in this example you don't want anyone to be authenticated in a high-risk countries. This is an example of geofencing!
Source: Adapted from community discussion — f9ly
Which of the following is MOST likely to outline the roles and responsibilities of data controllers and data processors?
Answer: C
I looked into this and a LOT of sources are saying GDPR. So, let's go with that guys. We can't all be wrong..........I mean we can't right? Right...?
Source: Adapted from community discussion — Gino_Slim
Which of the following is MOST likely to contain ranked and ordered information on the likelihood and potential impact of catastrophic events that may affect business processes and systems, while also highlighting the residual risks that need to be managed after mitigating controls have been implemented?
Answer: B
A risk register is a document that contains ranked and ordered information on the likelihood and potential impact of various risks that may affect business processes and systems. It typically includes information on both threats and vulnerabilities and assesses the risk to the organization. The risk register also highlights the effectiveness of existing controls (mitigating controls) in reducing the impact or likelihood of the identified risks. It serves as a key tool for risk management and helps organizations prioritize and manage risks effectively.
Source: Adapted from community discussion — ApplebeesWaiter1122
A worldwide manufacturing company has been experiencing email account compromises. In one incident, a user logged in from the corporate office in France, but then seconds later, the same user account attempted a login from Brazil. Which of the following account policies would BEST prevent this type of attack?
Answer: B
I vote impossible travel time. It states it is a worldwide company so you cannot set up a geofencing perimeter. However you could have impossible travel time alerts.
Source: Adapted from community discussion — [Removed]
A new vulnerability in the SMB protocol on the Windows systems was recently discovered, but no patches are currently available to resolve the issue. The security administrator is concerned that servers in the company’s DMZ will be vulnerable to external attack; however, the administrator cannot disable the service on the servers, as SMB is used by a number of internal systems and applications on the LAN. Which of the following TCP ports should be blocked for all external inbound connections to the DMZ as a workaround to protect the servers? (Choose two.)
Answer: BF
The two TCP ports that should be blocked for all external inbound connections to the DMZ as a workaround to protect the servers are 139 and 445. SMB uses port 139 and 445 to communicate, and blocking these ports will prevent external attackers from exploiting the vulnerability in the SMB protocol. It is important to note that blocking these ports will also prevent legitimate external access to SMB services on the servers in the DMZ. Ports 135, 143, 161, and 443 are not typically associated with SMB, so blocking them would not provide any protection against the SMB vulnerability. Port 135 is used for Remote Procedure Call (RPC) traffic, port 143 is used for IMAP traffic, port 161 is used for Simple Network Management Protocol (SNMP) traffic, and port 443 is used for HTTPS traffic. Therefore, the correct answer is B. 139 and F. 445.
Source: Adapted from community discussion — Yawannawanka
A recent phishing campaign resulted in several compromised user accounts. The security incident response team has been tasked with reducing the manual labor of filtering through all the phishing emails as they arrive and blocking the sender’s email address, along with other time-consuming mitigation actions. Which of the following can be configured to streamline those tasks?
Answer: A
A Security Orchestration, Automation, and Response (SOAR) playbook can be configured to streamline the tasks of filtering through phishing emails, blocking sender email addresses, and automating other mitigation actions. SOAR platforms are designed to help security teams automate and orchestrate incident response processes, making incident handling more efficient and less labor-intensive. In the context of a phishing campaign, a SOAR playbook can be created to automatically analyze incoming emails for phishing indicators, such as suspicious URLs or attachments, and trigger specific actions based on predefined rules. For example, the playbook can automatically block the sender's email address, quarantine suspicious emails, notify relevant stakeholders, and initiate the investigation process. By leveraging automation and orchestration through a SOAR platform, the incident response team can significantly reduce the manual effort required to handle phishing incidents and respond to them more effectively and efficiently.
Source: Adapted from community discussion — ApplebeesWaiter1122
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
SY0-601 practice, question 131. 856 questions available.
Version 1.0.0. How we source questions