CompTIA Security+ (2020 series)856 questions across 86 pages are complete and free, with no account or card.
856 questions in this bank
Free access · progress saved on this device
Which of the following types of controls is a turnstile?
Answer: A
Didnt know that was what they were called. A mechanical gate consisting of revolving horizontal arms fixed to a vertical post, allowing only one person at a time to pass through. Think of those bad boys at Bass Pro Shops or Theme park entrances.
Source: Adapted from community discussion — loccodennis
Users report access to an application from an internal workstation is still unavailable to a specific server, even after a recent firewall rule implementation that was requested for this access. ICMP traffic is successful between the two devices. Which of the following tools should the security analyst use to help identify if the traffic is being blocked?
Answer: A
To help identify if the traffic is being blocked between the two devices, the security analyst should use option A: nmap. nmap is a network exploration and security auditing tool that can be used to identify open ports and services on a remote host. It can also be used to determine if a particular port is being blocked by a firewall. By using nmap to scan the server that the users are attempting to access, the security analyst can determine if the firewall rule implementation was successful and if the necessary port is open and available. Option B: tracert, would not help identify if the traffic is being blocked. Tracert is a tool that helps identify the network path between two devices, but it does not provide information about whether or not traffic is being blocked.
Source: Adapted from community discussion — Ahmed_aldouky
As part of annual audit requirements, the security team performed a review of exceptions to the company policy that allows specific users the ability to use USB storage devices on their laptops. The review yielded the following results: • The exception process and policy have been correctly followed by the majority of users. • A small number of users did not create tickets for the requests but were granted access. • All access had been approved by supervisors. • Valid requests for the access sporadically occurred across multiple departments. • Access, in most cases, had not been removed when it was no longer needed. Which of the following should the company do to ensure that appropriate access is not disrupted but unneeded access is removed in a reasonable time frame?
Answer: C
Performing a quarterly audit allows the company to review all user accounts that have been granted access to USB storage devices and verify the validity of the exceptions. By involving the management team in the verification process, the company ensures that access is properly authorized and aligned with business needs. The audit helps identify any unneeded access that should be removed, ensuring that access privileges are maintained appropriately. This approach provides a balance between maintaining necessary access and removing access that is no longer required, based on periodic reviews and validations.
Source: Adapted from community discussion — ApplebeesWaiter1122
A financial institution would like to store its customer data in a cloud but still allow the data to be accessed and manipulated while encrypted. Doing so would prevent the cloud service provider from being able to decipher the data due to its sensitivity. The financial institution is not concerned about computational overheads and slow speeds. Which of the following cryptographic techniques would BEST meet the requirement?
Answer: C
C Homomorphic encryption is a form of encryption that permits users to perform computations on its encrypted data without first decrypting it.
Source: Adapted from community discussion — pmmg
A cryptomining company recently deployed a new antivirus application to all of its mining systems. The installation of the antivirus application was tested on many personal devices, and no issues were observed. Once the antivirus application was rolled out to the servers, constant issues were reported. As a result, the company decided to remove the mining software. The antivirus application was MOST likely classifying the software as:
Answer: B
Cryptomining software can sometimes be categorized as potentially unwanted programs by antivirus applications. This classification is based on the nature of the software and how it operates. While cryptomining software itself is not malicious, it can consume significant system resources and may be installed without the user's explicit consent or knowledge, leading to its classification as a PUP by some antivirus applications.
Source: Adapted from community discussion — ApplebeesWaiter1122
A cybersecurity administrator is using iptables as an enterprise firewall. The administrator created some rules, but the network now seems to be unresponsive. All connections are being dropped by the firewall. Which of the following would be the BEST option to remove the rules?
Answer: B
The BEST option to remove the rules in this scenario would be option B, which is to use the command "iptables -F" to flush all the rules in the firewall. Option A ("iptables -t mangle -X") would only remove the mangle table rules, which may not be the only rules causing the issue. Option C ("iptables -Z") would zero the counters for all rules, but would not remove the rules themselves. Option D ("iptables -P INPUT -j DROP") would set the default policy of the INPUT chain to DROP, which would still cause all connections to be dropped by the firewall. Therefore, option B is the most appropriate command to remove all rules from the firewall and restore network connectivity.
Source: Adapted from community discussion — Ahmed_aldouky
An incident response technician collected a mobile device during an investigation. Which of the following should the technician do to maintain chain of custody?
Answer: A
Maintaining proper documentation of the collection and ensuring that there is a clear chain of custody is essential for preserving the integrity and admissibility of evidence. The technician should document details such as the date, time, location, and individuals involved in the collection process. Each time the possession of the device changes hands, it should be properly recorded and acknowledged by the parties involved. This helps establish a clear trail of custody, ensuring that the device's integrity is maintained and that the evidence collected is reliable.
Source: Adapted from community discussion — ApplebeesWaiter1122
A company recently implemented a patch management policy; however, vulnerability scanners have still been flagging several hosts, even after the completion of the patch process. Which of the following is the MOST likely cause of the issue?
Answer: C
C. Third-party applications are not being patched. It's not zero day. It's extremely unlikely a vulnerability scanner would discover a zero day vulnerability bcs nobody knows it exists.
Source: Adapted from community discussion — ganymede
Which of the following controls would provide the BEST protection against tailgating?
Answer: A
An access control vestibule is a physical security measure that consists of a small enclosed area with two sets of doors. It ensures that only one person is allowed to enter at a time, preventing unauthorized individuals from following closely behind an authorized person. The first set of doors must close and secure before the second set of doors can be opened, creating a controlled entry point.
Source: Adapted from community discussion — ApplebeesWaiter1122
A penetration tester executes the command crontab -l while working in a Linux server environment. The penetration tester observes the following string in the current user's list of cron jobs: */10 * * * * root /writable/update.sh Which of the following actions should the penetration tester perform NEXT?
Answer: A
the penetration tester has discovered a cron job that runs every 10 minutes as the root user and executes the script /writable/update.sh. This suggests that the update.sh script has write permissions in a directory that is writable by the current user. Therefore, the next logical step for the penetration tester would be to review the contents of the /writable directory and the update.sh script to determine if there are any vulnerabilities that can be exploited to escalate privileges or otherwise compromise the system. The correct answer is: A. Privilege escalation.
Source: Adapted from community discussion — Ahmed_aldouky
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
SY0-601 practice, question 311. 856 questions available.
Version 1.0.0. How we source questions