SY0-601 practice questions 301–310

1. Question 301 · 856 in bank

   Select 2

   A security analyst needs to implement an MDM solution for BYOD users that will allow the company to retain control over company emails residing on the devices and limit data exfiltration that might occur if the devices are lost or stolen. Which of the following would BEST meet these requirements? (Choose two.)

   • AFull device encryption
   • BNetwork usage rules
   • CGeofencing
   • DContainerization
   • EApplication approve list
   • FRemote control

   Show answer

   Answer: AD

   Explanation

   A. Full device encryption D. Containerization See Pref. Messer: https://www.professormesser.com/security-plus/sy0-601/sy0-601-video/mobile-device-management-2/ "One way to manage this is through containerization. In this context, containerization means that we’re creating separate areas or partitions on the mobile device where we can keep private information in one partition and company information in another. This is different than the containerization that you might see for application deployment." "It seems almost standard these days that when we deploy a mobile device that we also ensure that all of the data stored on that device is encrypted. We do that by using full device encryption or FDE. Some mobile devices give you an option as to how you would like to implement that full device encryption. It can be, for example, a strongest setting, a stronger, or a strong."

   Source: Adapted from community discussion — Abdul2107

   Next question

2. Question 302 · 856 in bank

   Select 2

   A security administrator is evaluating remote access solutions for employees who are geographically dispersed. Which of the following would provide the MOST secure remote access? (Choose two.)

   • AIPSec
   • BSFTP
   • CSRTP
   • DLDAPS
   • ES/MIME
   • FSSL VPN

   Show answer

   Answer: AF

   Explanation

   thats weird, most people with recent reviews say 80-90% on the main page. Some people are planting misleading, discouraging comments. I have used Exam Topics to help with MCSA and it was very accurate for all 3 exams. Thats why Im back! https://www.examtopics.com/exams/comptia/sy0-601/view/

   Source: Adapted from community discussion — NerdAlert

   Next question

3. Question 303 · 856 in bank

   A malicious actor recently penetrated a company's network and moved laterally to the data center. Upon investigation, a forensics firm wants to know what was in the memory on the compromised server. Which of the following files should be given to the forensics firm?

   • ASecurity
   • BApplication
   • CDump
   • DSyslog

   Show answer

   Answer: C

   Explanation

   A memory dump is a snapshot of the contents of the system's memory at a specific point in time. It includes information such as running processes, open network connections, and other data residing in the RAM of the compromised server. By analyzing the memory dump, the forensics firm can identify any malicious processes, artifacts, or indicators of compromise that can help in understanding the extent of the attack and the actions taken by the malicious actor.

   Source: Adapted from community discussion — ApplebeesWaiter1122

   Next question

4. Question 304 · 856 in bank

   A company is looking to migrate some servers to the cloud to minimize its technology footprint. The company has a customer relationship management system on premises. Which of the following solutions will require the LEAST infrastructure and application support from the company?

   • ASaaS
   • BIaaS
   • CPaaS
   • DSDN

   Show answer

   Answer: A

   Explanation

   SaaS is a cloud computing model where the software application is hosted and provided by a third-party vendor over the internet. In this case, the company would migrate its customer relationship management system to a SaaS provider, who would handle the infrastructure, maintenance, and application support. With SaaS, the company does not need to manage the underlying infrastructure, such as servers, storage, or networking, nor does it need to worry about application support, updates, or patching. The responsibility for managing and maintaining the infrastructure and application resides with the SaaS provider. The company can focus on using the CRM system and leveraging its capabilities without the burden of infrastructure management.

   Source: Adapted from community discussion — ApplebeesWaiter1122

   Next question

5. Question 305 · 856 in bank

   Select 2

   A network administrator needs to determine the sequence of a server farm’s logs. Which of the following should the administrator consider? (Choose two.)

   • AChain of custody
   • BTags
   • CReports
   • DTime stamps
   • EHash values
   • FTime offset

   Show answer

   Answer: DF

   Explanation

   Hashing makes no sense, as it has nothing with the order in which the logs are captured. Time stamps and the time offset (think time zones) will definitely impact the order in which they are displayed.

   Source: Adapted from community discussion — VHuckle

   Next question

6. Question 306 · 856 in bank

   Which of the following is the BEST reason to maintain a functional and effective asset management policy that aids in ensuring the security of an organization?

   • ATo provide data to quantify risk based on the organization's systems
   • BTo keep all software and hardware fully patched for known vulnerabilities
   • CTo only allow approved, organization-owned devices onto the business network
   • DTo standardize by selecting one laptop model for all users in the organization

   Show answer

   Answer: A

   Explanation

   A. To provide data to quantify risk based on the organization's systems. Maintaining a functional and effective asset management policy is essential for ensuring the security of an organization. This policy enables the organization to identify all assets, such as hardware, software, and data, that exist within its environment. Once all assets are identified, the organization can determine their value, the risks associated with each asset, and the controls needed to protect those assets from threats. By having a clear picture of the organization's systems and assets, it becomes possible to identify vulnerabilities and prioritize efforts to address them. A well-executed asset management policy can provide the data necessary to quantify risk based on the organization's systems, which is crucial for effective risk management. While keeping software and hardware patched, only allowing approved devices onto the network, and standardizing hardware may all be important components of an asset management policy, they are not the primary reason for maintaining such a policy.

   Source: Adapted from community discussion — Ahmed_aldouky

   Next question

7. Question 307 · 856 in bank

   A security administrator, who is working for a government organization, would like to utilize classification and granular planning to secure top secret data and grant access on a need-to-know basis. Which of the following access control schemas should the administrator consider?

   • AMandatory
   • BRule-based
   • CDiscretionary
   • DRole-based

   Show answer

   Answer: A

   Explanation

   A. Mandatory Access Control (MAC) In a MAC system, an operating system provides individual users with access based on data confidentiality and levels of user clearance. MAC is the strictest of all models. Access is granted on a strict, need-to-know basis. Users must prove they need the requested information or access before gaining permission.

   Source: Adapted from community discussion — hsdj

   Next question

8. Question 308 · 856 in bank

   An organization is outlining data stewardship roles and responsibilities. Which of the following employee roles would determine the purpose of data and how to process it?

   • AData custodian
   • BData controller
   • CData protection officer
   • DData processor

   Show answer

   Answer: B

   Explanation

   The data controller is responsible for determining the purposes and means of processing personal data. They have the authority to make decisions regarding the collection, use, and disclosure of data in accordance with applicable laws and regulations. The data controller sets the objectives and methods for data processing and ensures compliance with privacy and data protection requirements. They define the purposes for which personal data is processed and establish the legal basis for processing activities.

   Source: Adapted from community discussion — ApplebeesWaiter1122

   Next question

9. Question 309 · 856 in bank

   Multiple beaconing activities to a malicious domain have been observed. The malicious domain is hosting malware from various endpoints on the network. Which of the following technologies would be BEST to correlate the activities between the different endpoints?

   • AFirewall
   • BSIEM
   • CIPS
   • DProtocol analyzer

   Show answer

   Answer: B

   Explanation

   A SIEM system is designed to collect, analyze, and correlate log data from various sources within an organization's network, including endpoints, servers, firewalls, and other security devices. It provides real-time monitoring and analysis of security events, allowing security analysts to identify and respond to potential threats. In this case, the SIEM can collect logs from the various endpoints on the network that are communicating with the malicious domain. By correlating the activities across these endpoints, the SIEM can provide a comprehensive view of the beaconing activities and help identify the extent of the infection. It can also generate alerts or triggers based on predefined rules or patterns, enabling timely incident response and mitigation actions.

   Source: Adapted from community discussion — ApplebeesWaiter1122

   Next question

10. Question 310 · 856 in bank

    A security analyst is receiving numerous alerts reporting that the response time of an internet-facing application has been degraded. However, the internal network performance was not degraded. Which of the following MOST likely explains this behavior?

    • ADNS poisoning
    • BMAC flooding
    • CDDoS attack
    • DARP poisoning

    Show answer

    Answer: C

    Explanation

    Most denial of service (DoS) attacks against websites and gateways are distributed DoS (DDoS). This means that the attack is launched from multiple hosts simultaneously. Typically, a threat actor will compromise machines to use as handlers in a command and control network. The handlers are used to compromise hundreds or thousands or millions of hosts with DoS tools (bots) forming a botnet. The internal network has not been affected by the attack.

    Source: Adapted from community discussion — stoneface

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

SY0-601 practice, question 301. 856 questions available.