SY0-601 practice questions 551–560

1. Question 551 · 856 in bank

   Which of the following authentication methods is considered to be the LEAST secure?

   • ATOTP
   • BSMS
   • CHOTP
   • DToken key

   Show answer

   Answer: B

   Explanation

   SMS (Short Message Service) authentication involves sending a one-time passcode (OTP) to the user's mobile phone via text message, which the user then enters to complete the authentication process. While it is more convenient than some other methods, it is also less secure compared to the other options listed. SMS authentication has several security weaknesses: Phishing: Attackers can use social engineering to trick users into revealing their SMS OTP, compromising the authentication. SIM swapping: Attackers can contact the user's mobile service provider and convince them to transfer the phone number to a new SIM card, gaining access to the SMS OTP. Intercepting SMS: In some cases, attackers with advanced capabilities can intercept SMS messages, allowing them to capture the OTP. Due to these vulnerabilities, SMS authentication is considered less secure compared to other authentication methods like TOTP (Time-based One-Time Password) and HOTP (HMAC-based One-Time Password), which rely on algorithms and do not involve transmitting the OTP via SMS.

   Source: Adapted from community discussion — ApplebeesWaiter1122

   Next question

2. Question 552 · 856 in bank

   Employees in the research and development business unit receive extensive training to ensure they understand how to best protect company data. Which of the following is the type of data these employees are most likely to use in day to-day work activities?

   • AEncrypted
   • BIntellectual property
   • CCritical
   • DData in transit

   Show answer

   Answer: B

   Explanation

   B. Intellectual property The primary focus of research and development activities is to create and develop intellectual property, which includes patents, inventions, proprietary technologies, and other innovative creations. Protecting this intellectual property is of paramount importance in such business units to maintain a competitive advantage and safeguard the company's valuable assets. Critical data can encompass various types of data, but it does not specifically describe the primary focus of research and development work.

   Source: Adapted from community discussion — Yarzo

   Next question

3. Question 553 · 856 in bank

   An audit report indicates multiple suspicious attempts to access company resources were made. These attempts were not detected by the company. Which of the following would be the best solution to implement on the company's network?

   • AIntrusion prevention system
   • BProxy server
   • CJump server
   • DSecurity zones

   Show answer

   Answer: A

   Explanation

   To address the issue of suspicious attempts to access company resources that were not detected, the best solution to implement on the company's network would be an Intrusion Prevention System (IPS). An Intrusion Prevention System (IPS) is a security device or software application that monitors network traffic for malicious activity and can automatically take action to block or prevent potential threats. It goes beyond intrusion detection by actively analyzing network traffic in real-time and can actively respond to identified threats. With an IPS in place, the system can detect and block suspicious activities, such as unauthorized attempts to access company resources, before they can cause harm. It provides an additional layer of security to the network and can help to mitigate various cyber threats.

   Source: Adapted from community discussion — ApplebeesWaiter1122

   Next question

4. Question 554 · 856 in bank

   A security analyst is working on a project to implement a solution that monitors network communications and provides alerts when abnormal behavior is detected. Which of the following is the security analyst MOST likely implementing?

   • AVulnerability scans
   • BUser behavior analysis
   • CSecurity orchestration, automation, and response
   • DThreat hunting

   Show answer

   Answer: B

   Explanation

   Not 100% sure but i will go with B. User behavior Analysis. Reason: As per Comptia objectives, User behavior Analysis comes under SIEM. Well as the Question asks whats most likely the solution being implemented hence User behavior analysis seems to be the direct answer. SOAR simply means you are adding automation and servers handle the security tasks automatically and take action. happy to discuss. Some of the question are to confuse so i ll stick to most direct connection in this case. B

   Source: Adapted from community discussion — Nirmalabhi

   References

   • Microsoft Learn

   Next question

5. Question 555 · 856 in bank

   An administrator identifies some locations on the third floor of the building that have a poor wireless signal Multiple users confirm the incident and report it is not an isolated event. Which of the following should the administrator use to find the areas with a poor or non-existent wireless signal?

   • AHeat map
   • BInput validation
   • CSite survey
   • DEmbedded systems

   Show answer

   Answer: C

   Explanation

   To find the areas with a poor or non-existent wireless signal, the administrator should conduct a wireless site survey. A wireless site survey is a process of planning and designing a wireless network by surveying the physical location to understand the RF (radio frequency) characteristics and signal propagation in the area. During a site survey, the administrator uses specialized tools and equipment to measure the wireless signal strength at various locations within the building. The data collected is then used to create a heat map, which visually represents the signal coverage and strength across the surveyed area. This heat map helps identify areas with poor or weak signal strength and allows the administrator to make informed decisions about the placement of wireless access points or other necessary adjustments to improve wireless coverage and performance.

   Source: Adapted from community discussion — ApplebeesWaiter1122

   Next question

6. Question 556 · 856 in bank

   Which of the following has been implemented when a host-based firewall on a legacy Linux system allows connections from only specific internal IP addresses?

   • ACompensating control
   • BNetwork segmentation
   • CTransfer of risk
   • DSNMP traps

   Show answer

   Answer: A

   Explanation

   Coming back to the is questions.... It could also be A. I think the key word in the question is "Legacy." A compensating control is an alternative measure implemented to mitigate the risk when a required security control cannot be implemented as specified. In the scenario described, the host-based firewall on a legacy Linux system allows connections only from specific internal IP addresses. This configuration acts as a compensating control if the ideal network segmentation cannot be implemented due to it being a legacy system. Compensating controls are put in place to address security gaps and reduce risk in situations where the primary security control cannot be applied. Network segmentation might be the ideal solution, but if it cannot be implemented due to certain limitations or constraints like it being a legacy system, the host-based firewall with specific IP address restrictions can serve as a compensating control to achieve a similar level of security.

   Source: Adapted from community discussion — ApplebeesWaiter1122

   Next question

7. Question 557 · 856 in bank

   An attacker tricks a user into providing confidential information. Which of the following describes this form of malicious reconnaissance?

   • APhishing
   • BSocial engineering
   • CTyposquatting
   • DSmishing

   Show answer

   Answer: B

   Explanation

   In this case, both options, phishing and social engineering, could be considered correct answers. Phishing is a type of social engineering attack that involves impersonating a trustworthy entity to solicit personal information from the victim Therefore, the act of an attacker tricking a user into providing confidential information is an example of a phishing attack, which is a type of social engineering attack. However, if the question specifically asks for the broader term that refers to the use of psychological manipulation to trick users into making security mistakes or giving away sensitive information, then social engineering would be the correct answer.

   Source: Adapted from community discussion — sujon_london

   Next question

8. Question 558 · 856 in bank

   A large bank with two geographically dispersed data centers is concerned about major power disruptions at both locations. Every day each location experiences very brief outages that last for a few seconds. However, during the summer a high risk of intentional under-voltage events that could last up to an hour exists, particularly at one of the locations near an industrial smelter. Which of the following is the best solution to reduce the risk of data loss?

   • ADual supply
   • BGenerator
   • CPDU
   • DDaily backups

   Show answer

   Answer: B

   Explanation

   B. Generator Same as Q.159 https://www.examtopics.com/discussions/comptia/view/79201-exam-sy0-601-topic-1-question-159-discussion/ But in this Q.159, UPS is an option, which is the answer, but if UPS not an option like this one here, Generator is the answer.

   Source: Adapted from community discussion — Abdul2107

   Next question

9. Question 559 · 856 in bank

   An organization would like to store customer data on a separate part of the network that is not accessible to users on the mam corporate network. Which of the following should the administrator use to accomplish this goal?

   • ASegmentation
   • BIsolation
   • CPatching
   • DEncryption

   Show answer

   Answer: A

   Explanation

   Segmentation involves dividing a network into separate subnetworks or segments, each with its own security controls and access permissions. By segmenting the network, the administrator can isolate sensitive customer data from the main corporate network, reducing the risk of unauthorized access to the data.

   Source: Adapted from community discussion — ApplebeesWaiter1122

   Next question

10. Question 560 · 856 in bank

    A company is adding a clause to its AUP that states employees are not allowed to modify the operating system on mobile devices. Which of the following vulnerabilities is the organization addressing?

    • ACross-site scripting
    • BBuffer overflow
    • CJailbreaking
    • DSide loading

    Show answer

    Answer: C

    Explanation

    Jailbreaking is a process in which an individual gains unauthorized access to the operating system of a mobile device, typically to remove software restrictions imposed by the manufacturer or carrier. This allows users to install unauthorized apps and make modifications to the device's operating system, which can create security risks and expose the device to potential threats and vulnerabilities. By adding a clause to the Acceptable Use Policy (AUP) that prohibits employees from modifying the operating system on mobile devices, the company aims to prevent the practice of jailbreaking, which helps mitigate potential security risks associated with unauthorized software modifications.

    Source: Adapted from community discussion — ApplebeesWaiter1122

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

SY0-601 practice, question 551. 856 questions available.