CompTIA Security+ (2020 series)856 questions across 86 pages are complete and free, with no account or card.
856 questions in this bank
Free access · progress saved on this device
A security team discovered a large number of company-issued devices with non-work-related software installed. Which of the following policies would MOST likely contain language that would prohibit this activity?
Answer: C
A. NDA - Non-Disclosure Agreement B. BPA - Business Partner Agreement C. AUP - Acceptable Use Policy D. SLA - Service Level Agreement
Source: Adapted from community discussion — Jimlo55
Which of the following BEST describes data streams that are compiled through artificial intelligence that provides insight on current cyberintrusions, phishing, and other malicious cyberactivity?
Answer: D
The best description for the data streams mentioned would be "Threat Intelligence Feeds". Threat Intelligence Feeds gather and analyze data from various sources to provide insight into current and emerging cybersecurity threats, including cyber intrusions, phishing attacks, and other malicious cyber activities. These feeds use artificial intelligence algorithms and machine learning to process vast amounts of data and identify patterns that indicate malicious activity.
Source: Adapted from community discussion — Ufuk_Ari
Which of the following would be the BEST resource for a software developer who is looking to improve secure coding practices for web applications?
Answer: A
OWASP is a widely recognized and respected organization that focuses on web application security. They provide a wealth of information, tools, and resources for developers to enhance the security of their web applications. NIST CSF stands for the National Institute of Standards and Technology (NIST) Cybersecurity Framework, which is a framework for managing and reducing cybersecurity risks. While it provides valuable guidelines for overall cybersecurity, it may not specifically address secure coding practices for web applications.
Source: Adapted from community discussion — ApplebeesWaiter1122
A security analyst is concerned about critical vulnerabilities that have been detected on some applications running inside containers. Which of the following is the BEST remediation strategy?
Answer: A
Answer: Update the base container image and redeploy the environment (A) In the scenario, the vulnerabilities found were critical meaning that patches would need to be applied immediately. The options to patch the containers (B &C) could work, however, patching would likely take months, seeing how this vulnerability is critical, neither would address the concern's urgency. The option to update the host (D) also could work, however, the scenario specified that the vulnerabilities have been detected only on some applications and not on the host itself. While a container runs on a host machine, it does not mean they share the same vulnerabilities. So updating the host would likely not patch the vulnerabilities that were found in the containers. Out of the given options, the option to update on the base container image would 1.) addresses where the vulnerabilities were found and what needs to be updated and 2.) addresses the urgency to patch the critical vulnerability.
Source: Adapted from community discussion — rodwave
Ann, a customer, received a notification from her mortgage company stating her PII may be shared with partners, affiliates, and associates to maintain day-to-day business operations. Which of the following documents did Ann receive?
Answer: A
A. An annual privacy notice. Ann received an annual privacy notice from her mortgage company, which is sent out to customers to inform them of their PII may be processed, shared, or stored by the company's partners, affiliates, and associates. The notice also outlines the rights customers have with regards to their personal data.
Source: Adapted from community discussion — ramesh2022
A Chief Information Security Officer (CISO) is evaluating the dangers involved in deploying a new ERP system for the company. The CISO categorizes the system, selects the controls that apply to the system, implements the controls, and then assesses the success of the controls before authorizing the system. Which of the following is the CISO using to evaluate the environment for this new ERP system?
Answer: C
C. NIST Risk Management Framework is the framework the CISO is using to evaluate the environment for this new ERP system. The NIST Risk Management Framework (RMF) is a structured approach to managing information security risk that is used by organizations to ensure the confidentiality, integrity, and availability of their information systems and data. The CISO's actions of categorizing the system, selecting the controls that apply to the system, implementing the controls, and then assessing the success of the controls before authorizing the system to align with the six steps of the NIST RMF: 1. Categorize information systems 2. Select security controls 3. Implement security controls 4. Assess security controls 5. Authorize information systems 6. Monitor security controls By using the NIST RMF, the CISO can ensure that a comprehensive and systematic approach to information security is taken when evaluating the new ERP system and can reduce the risk of potential security incidents or breaches
Source: Adapted from community discussion — Dachosenone
A manufacturing company has several one-off legacy information systems that cannot be migrated to a newer OS due to software compatibility issues. The OSs are still supported by the vendor, but the industrial software is no longer supported. The Chief Information Security Officer has created a resiliency plan for these systems that will allow OS patches to be installed in a non-production environment, while also creating backups of the systems for recovery. Which of the following resiliency techniques will provide these capabilities?
Answer: C
By using virtual machines (VMs), the manufacturing company can create a non-production environment for installing OS patches and testing them before deploying them to the legacy information systems. VMs provide a flexible and isolated environment where different operating systems and software can be run independently of the underlying hardware. With VMs, the company can create snapshots or checkpoints of the virtual machines before applying patches or making changes. If any issues occur during the patching process, the company can revert to a previous snapshot, ensuring that the systems can be easily rolled back to a known working state. In addition, virtual machines also facilitate creating backups of the systems for recovery purposes. The company can take regular backups of the VMs, including both the OS and the industrial software running on them. These backups can be used to restore the systems in the event of a failure, providing a means of recovering the one-off legacy information systems.
Source: Adapted from community discussion — ApplebeesWaiter1122
A retail store has a business requirement to deploy a kiosk computer in an open area. The kiosk computer’s operating system has been hardened and tested. A security engineer is concerned that someone could use removable media to install a rootkit. Which of the following should the security engineer configure to BEST protect the kiosk computer?
Answer: A
"Measured Boot is a new feature of Windows 8 that was created to help better protect your machine from rootkits and other malware. Measured Boot will check each start up component including the firmware all the way to the boot drivers and it will store this information in what is called a Trusted Platform Module (TPM)." https://www.microcenter.com/tech_center/article/8862/what-is-measured-boot
Source: Adapted from community discussion — RvR109
A company is implementing MFA for all applications that store sensitive data. The IT manager wants MFA to be non-disruptive and user friendly. Which of the following technologies should the IT manager use when implementing MFA?
Answer: C
Push notifications are a form of MFA that involves sending a notification to a user's mobile device or other trusted device to verify their identity. When the user attempts to log in to an application, a push notification is sent to their device, and they can simply approve or deny the login attempt directly from the notification. This method is often more user-friendly compared to other options as it eliminates the need to manually enter codes or passwords. By using push notifications for MFA, the process becomes seamless and convenient for the user. They can quickly and easily verify their identity without having to switch between different applications or manually enter codes. This enhances the user experience and reduces disruptions while maintaining a strong level of security.
Source: Adapted from community discussion — ApplebeesWaiter1122
A security engineer is reviewing the logs from a SAML application that is configured to use MFA. During this review, the engineer notices a high volume of successful logins that did not require MFA from users who were traveling internationally. The application, which can be accessed without a VPN, has a policy that allows time-based tokens to be generated. Users who change locations should be required to reauthenticate but have been able to log in without doing so. Which of the following statements BEST explains the issue?
Answer: D
The issue lies in the fact that the user's IP address is changing between logins due to international travel, but the application is not invalidating the token. This means that the previously issued token, which does not require MFA, remains valid even after the user has changed locations. As a result, the users can log in without going through the MFA process, violating the policy set by the application. The IP address is a common factor used to identify the location of the user. When a user's IP address changes significantly, it indicates a change in location. In this case, the application should have mechanisms in place to detect such changes and invalidate the existing token, requiring the user to reauthenticate and complete the MFA process for security purposes.
Source: Adapted from community discussion — ApplebeesWaiter1122
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
SY0-601 practice, question 241. 856 questions available.
Version 1.0.0. How we source questions