CompTIA Security+ (2020 series)856 questions across 86 pages are complete and free, with no account or card.
856 questions in this bank
Free access · progress saved on this device
Which of the following scenarios BEST describes a risk reduction technique?
Answer: B
Just passed the exam with a score of 800 on 10/28/23. About 90% of the questions are from here. This question is on the exam.
Source: Adapted from community discussion — JT4
Which of the following social engineering attacks BEST describes an email that is primarily intended to mislead recipients into forwarding the email to others?
Answer: A
Just passed the exam with a score of 800 on 10/28/23. About 90% of the questions are from here. This question is on the exam.
Source: Adapted from community discussion — JT4
Which of the following will provide the BEST physical security countermeasures to stop intruders? (Choose two.)
Answer: DE
Lighting can help provide visibility at night and deter potential intruders, but it may not necessarily stop an intruder who is determined to enter a facility. Access control vestibules, fencing, are more directly aimed at preventing entry. Alarms and signage can also serve as a deterrent and provide a way to alert security personnel if an intrusion occurs.
Source: Adapted from community discussion — Iwannabeabadasshacker
A company wants to restrict emailing of PHI documents. The company is implementing a DLP solution. In order to restrict PHI documents, which of the following should be performed FIRST?
Answer: C
In order to restrict emailing of PHI (Protected Health Information) documents, the first step should be to perform classification. Classification involves identifying and categorizing data based on its sensitivity and importance. By classifying documents containing PHI as sensitive or confidential, the company can implement appropriate security controls and restrictions. Once the documents are classified, the DLP (Data Loss Prevention) solution can be configured to recognize and enforce policies specific to PHI documents. The DLP solution can monitor outgoing emails, analyze the content and attachments, and prevent the transmission of PHI documents based on the defined policies.
Source: Adapted from community discussion — ApplebeesWaiter1122
An organization is concerned about hackers potentially entering a facility and plugging in a remotely accessible Kali Linux box. Which of the following should be the first lines of defense against such an attack? (Choose two.)
Answer: CD
Guys, I'm going to have an exam tomorrow, I'm very nervous because my professional future depends on this result, but I have faith in God that everything will work out. Thank you all for your help here at ExamTopics.
Source: Adapted from community discussion — [Removed]
An employee used a corporate mobile device during a vacation. Multiple contacts were modified in the device during the employee's vacation. Which of the following attack methods did an attacker use to insert the contacts without having physical access to the device?
Answer: B
B. Bluejacking The attack method used to insert contacts into the corporate mobile device without physical access is called "Bluejacking." Bluejacking is a type of cyberattack where an attacker sends unsolicited messages or contacts to Bluetooth-enabled devices, such as smartphones, tablets, or laptops. The attack takes advantage of the Bluetooth feature's ability to discover nearby devices and receive incoming messages or contacts. In this scenario, while the employee was on vacation, an attacker likely exploited the Bluetooth feature on the corporate mobile device to send and insert modified contacts into the device. The attack is carried out without the attacker needing to physically access the device, as long as the device's Bluetooth functionality is enabled and set to discoverable mode.
Source: Adapted from community discussion — Random_Leaf_Ninja127
A security administrator wants to implement a program that tests a user's ability to recognize attacks over the organization’s email system. Which of the following would be best suited for this task?
Answer: D
Note that CompTIA lists these methodologies under "User training": - Gamification - Capture the flag - Phishing campaigns - Phishing simulations - Computer-based training (CBT) - Role-based training
Source: Adapted from community discussion — workhard
A security analyst is reviewing packet capture data from a compromised host on the network. In the packet capture, the analyst locates packets that contain large amounts of text. Which of the following is most likely installed on the compromised host?
Answer: A
A keylogger is a type of malicious software or hardware device that records every keystroke made on a computer or mobile device keyboard. This can include passwords, credit card numbers, and other sensitive information. The information is then transmitted to a remote location where the attacker can access it. Keyloggers can be used for identity theft, espionage, or other malicious purposes.
Source: Adapted from community discussion — ApplebeesWaiter1122
An organization needs to implement more stringent controls over administrator/root credentials and service accounts. Requirements for the project include: • Check-in/checkout of credentials • The ability to use but not know the password • Automated password changes • Logging of access to credentials Which of the following solutions would meet the requirements?
Answer: C
A privileged access management system would meet the requirements. A privileged access management (PAM) system is a security solution that provides centralized control over the use of privileged accounts. It allows organizations to manage and monitor the use of privileged accounts, including administrator/root credentials and service accounts. PAM solutions typically include features such as check-in/checkout of credentials, the ability to use but not know the password, automated password changes, and logging of access to credentials. OAuth 2.0 is an authorization framework that enables third-party applications to obtain limited access to a web service. Secure Enclave is a hardware-based security solution that provides a secure environment for executing code and storing sensitive data on Apple devices. An OpenID Connect authentication system is an authentication protocol that enables users to authenticate with multiple websites using a single set of credentials.
Source: Adapted from community discussion — TheRoot9
A systems analyst is responsible for generating a new digital forensics chain-of-custody form. Which of the following should the analyst include in this documentation? (Choose two).
Answer: CE
-AC is correct The chain-of-custody form is a legal document that tracks the handling and storage of evidence throughout the forensic process. It is important to include the order of volatility in the documentation, which is the sequence in which evidence is collected based on its volatility, starting from the most volatile to the least volatile, to ensure that volatile evidence is not lost. The provenance of the artifacts is also critical to include, as it tracks the origin, custody, and ownership of the evidence, which is essential in establishing its authenticity and admissibility in court. Other possible elements to include in the chain-of-custody form might include the date and time of collection, any relevant warning banners or disclaimers, and a forensics non-disclosure agreement (NDA) to ensure the confidentiality and integrity of the evidence. The vendor's name might be included in some cases, such as when third-party forensic tools or services are used, but it is not a required element.
Source: Adapted from community discussion — mouettespaghetti
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
SY0-601 practice, question 341. 856 questions available.
Version 1.0.0. How we source questions