SY0-601 practice questions 421–430

1. Question 421 · 856 in bank

   Which of the following is the GREATEST security concern when outsourcing code development to third-party contractors for an internet-facing application?

   • AIntellectual property theft
   • BElevated privileges
   • CUnknown backdoor
   • DQuality assurance

   Show answer

   Answer: C

   Explanation

   While intellectual property theft, elevated privileges, and quality assurance are all important considerations when outsourcing code development, the presence of an unknown backdoor poses the greatest security risk. An unknown backdoor is a hidden entry point or vulnerability intentionally or unintentionally inserted into the code by a malicious or compromised developer. It can provide unauthorized access to the application or its underlying systems, allowing attackers to exploit the application's functionality or compromise sensitive data. An unknown backdoor can be difficult to detect and may remain undetected for an extended period, allowing attackers to maintain persistent access and potentially exploit the application or compromise the organization's systems or data. It can bypass security controls and enable unauthorized actions, posing a significant risk to the security and integrity of the internet-facing application.

   Source: Adapted from community discussion — ApplebeesWaiter1122

   Next question

2. Question 422 · 856 in bank

   A security administrator would like to ensure all cloud servers will have software preinstalled for facilitating vulnerability scanning and continuous monitoring. Which of the following concepts should the administrator utilize?

   • AProvisioning
   • BStaging
   • CStaging
   • DQuality assurance

   Show answer

   Answer: A

   Explanation

   The concept that the security administrator should utilize is "Provisioning". Provisioning is the process of setting up IT infrastructure and resources, which includes installing and configuring the necessary software and tools on servers to meet the security requirements of the organization. By ensuring that all cloud servers have software preinstalled for vulnerability scanning and continuous monitoring, the administrator can help to ensure that all servers meet the security standards of the organization and reduce the risk of security incidents.

   Source: Adapted from community discussion — ApplebeesWaiter1122

   Next question

3. Question 423 · 856 in bank

   A network architect wants a server to have the ability to retain network availability even if one of the network switches it is connected to goes down. Which of the following should the architect implement on the server to achieve this goal?

   • ARAID
   • BUPS
   • CNIC teaming
   • DLoad balancing

   Show answer

   Answer: C

   Explanation

   The network architect should implement NIC teaming on the server to achieve network availability even if one of the network switches it is connected to goes down. NIC teaming is the process of aggregating multiple network connections into a single virtual interface for redundancy and increased throughput. If one of the network switches goes down, the server can still use the other network connections to maintain network availability. RAID provides redundancy for storage, not for network availability. UPS provides power backup to devices in case of power outages. Load balancing distributes incoming traffic across multiple servers to optimize resource utilization, but it does not guarantee network availability in case of switch failure.

   Source: Adapted from community discussion — ApplebeesWaiter1122

   Next question

4. Question 424 · 856 in bank

   An employee received multiple messages on a mobile device. The messages were instructing the employee to pair the device to an unknown device. Which of the follow ng best describes what a malicious person might be doing to cause this issue to occur?

   • AJamming
   • BBluesnarfing
   • CEvil twin attack
   • DRogue access point

   Show answer

   Answer: B

   Explanation

   Bluesnarfing is a type of attack that targets Bluetooth-enabled devices, such as mobile phones and laptops, with the aim of gaining unauthorized access to the device's data and features. Attackers use specialized software tools to exploit vulnerabilities in Bluetooth protocols to connect to and gain control of a device without the owner's knowledge or consent. Once connected, attackers can steal sensitive information, such as contacts, emails, and messages, as well as take control of the device's features, such as making phone calls or sending text messages, without the owner's authorization. Similar to question 411

   Source: Adapted from community discussion — ApplebeesWaiter1122

   Next question

5. Question 425 · 856 in bank

   A security administrator installed a new web server. The administrator did this to increase the capacity for an application due to resource exhaustion on another server. Which of the following algorithms should the administrator use to split the number of the connections on each server in half?

   • AWeighted response
   • BRound-robin
   • CLeast connection
   • DWeighted least connection

   Show answer

   Answer: B

   Explanation

   -B is correct The security administrator should use the round-robin algorithm to split the number of connections on each server in half. Round-robin is a load-balancing algorithm that evenly distributes incoming network traffic across multiple servers or resources. With this algorithm, the first request is sent to the first server, the second request is sent to the second server, and so on in a rotating manner. This ensures that each server receives an equal share of the workload. Weighted response is a load-balancing algorithm that takes into account the response time of each server and directs traffic to the server with the fastest response time. Least connection is a load-balancing algorithm that directs traffic to the server with the fewest active connections. Weighted least connection is a load-balancing algorithm that combines the weighted response and least connection algorithms to direct traffic to the server with the fewest active connections and the fastest response time

   Source: Adapted from community discussion — mouettespaghetti

   Next question

6. Question 426 · 856 in bank

   Security analysts have noticed the network becomes flooded with malicious packets at specific times of the day. Which of the following should the analysts use to investigate this issue?

   • AWeb metadata
   • BBandwidth monitors
   • CSystem files
   • DCorrelation dashboards

   Show answer

   Answer: B

   Explanation

   Bandwidth monitors can be used to capture network traffic and identify any unusual traffic patterns, such as a spike in traffic during specific times of the day. This can help security analysts investigate and identify any potential malicious activity. Web metadata is not likely to be useful in investigating network traffic, system files are typically used to troubleshoot and diagnose system issues, and correlation dashboards are used to analyze and present data from multiple sources in a single view.

   Source: Adapted from community discussion — ApplebeesWaiter1122

   References

   • comptia.org documentation

   Next question

7. Question 427 · 856 in bank

   A security administrator performs weekly vulnerability scans on all cloud assets and provides a detailed report. Which of the following describes the administrator’s activities?

   • AContinuous deployment
   • BContinuous integration
   • CData owners
   • DData processor

   Show answer

   Answer: D

   Explanation

   There is a different version of this question which seems mire accurate A security administrator performs weekly vulnerability scans on all cloud assets and provides a detailed report. Which of the following describes the administrator's activities? A. Continuous deployment B. Continuous integration C. Continuous validation D. Continuous monitoring In this case, answer is D

   Source: Adapted from community discussion — Bl1024

   Next question

8. Question 428 · 856 in bank

   An attacker is targeting a company. The attacker notices that the company's employees frequently access a particular website. The attacker decides to infect the website with malware and hopes the employees' devices will also become infected. Which of the follow ng techniques is the attacker using?

   • AWatering-hole attack
   • BPretexting
   • CTyposquatting
   • DImpersonation

   Show answer

   Answer: A

   Explanation

   The attacker is using a watering-hole attack. This technique involves infecting a legitimate website that is frequented by the target organization's employees, with the goal of compromising their devices. The attacker can then use the compromised devices as a foothold into the organization's network. Pretexting, typosquatting, and impersonation are all different social engineering techniques used to trick individuals into divulging sensitive information or taking certain actions.

   Source: Adapted from community discussion — ApplebeesWaiter1122

   Next question

9. Question 429 · 856 in bank

   A digital forensics team at a large company is investigat ng a case in which malicious code was down oaded over an HTTPS connection and was running in memory, but was never committed to disk. Which of the following techniques should the team use to obtain a sample of the malware binary?

   • Apcap reassembly
   • BSSD snapshot
   • CImage volatile memory
   • DExtract from checksums

   Show answer

   Answer: C

   Explanation

   I passed as well.... these questions do help tremendously. Study them. Know why the right answers are the right ones and why the wrong answers are wrong and you'll do well. My test was about 50% new questions and 50% from here. ALL of the questions where the discussion group had split views of what the correct answer was were on my test. So were all of the simulation questions and a couple new ones. I had 6 simulation questions with 76 questions in total. I also recommend memorizing everything on the SYO-601 exam objectives document that CompTIA puts out. Good luck to each of you!

   Source: Adapted from community discussion — Farticus

   Next question

10. Question 430 · 856 in bank

    A website visitor is required to provide properly formatted information in a specific field on a website form. Which of the following security measures is most likely used for this mandate?

    • AInput validation
    • BCode signing
    • CSQL injection
    • DForm submission

    Show answer

    Answer: A

    Explanation

    Input validation is a security measure used to ensure that data entered into a form or application meets specific requirements and is in the correct format. In this scenario, the website requires the visitor to provide properly formatted information in a specific field on a website form. Implementing input validation will check the data entered by the user against predefined criteria to make sure it meets the required format. If the data does not match the expected format, the form will likely display an error message and prompt the user to correct their input before submission. This helps prevent certain types of attacks, such as code injection or data manipulation, by ensuring that only valid and properly formatted data is accepted by the application or website.

    Source: Adapted from community discussion — ApplebeesWaiter1122

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

SY0-601 practice, question 421. 856 questions available.