Question 601 · 856 in bank
Which of the following describes the BEST approach for deploying application patches?
Show answer
Answer: A
SY0-601AssociateCompTIAAll questions freePage 61 of 86
SY0-601 practice questions 601–610
CompTIA Security+ (2020 series)856 questions across 86 pages are complete and free, with no account or card.
Official study references
856 questions in this bank
Free access · progress saved on this device
Question 602 · 856 in bank
A small business just recovered from a ransomware attack against its file servers by purchasing the decryption keys from the attackers. The issue was triggered by a phishing email and the IT administrator wants to ensure it does not happen again. Which of the following should the IT administrator do FIRST after recovery?
Show answer
Answer: B
Explanation
Initially thought it was D but after a little research agreed with B; here`s why: The IT administrator should restrict administrative privileges and patch all systems and applications to prevent future attacks. One of the common ways ransomware spreads and gains access to critical systems is through compromised administrative accounts. By restricting administrative privileges, the administrator can limit the ability of malware to spread and make unauthorized changes.
Source: Adapted from community discussion — sujon_london
References
Question 603 · 856 in bank
After entering a username and password, an administrator must draw a gesture on a touch screen. Which of the following demonstrates what the administrator is providing?
Show answer
Answer: B
Explanation
The something you can do authentication factor refers to actions you can take such as gestures on a touch screen. As an example, Microsoft Windows 10 supports picture passwords. Users first select a picture, and then they can add three gestures as their picture password. Gestures include tapping in specific places on the picture, drawing lines between items with a finger, or drawing a circle around an item such as someone’s head. After registering the picture and their gestures, users repeat these gestures to log on again later. -Security+ SY0-601 Get Certified Get Ahead by Darril Gibson
Source: Adapted from community discussion — LeonardSnart
Question 604 · 856 in bank
An analyst visits an Internet forum looking for information about a tool. The analyst finds a thread that appears to contain relevant information. One of the posts says the following:
Which of the following BEST describes the attack that was attempted against the forum readers?
Show answer
Answer: C
Explanation
The .js is a clue here since XSS often uses Javascript - especially for the payload. XSS isn't limited to Javascript though.
Source: Adapted from community discussion — LinkinPark4evr
Question 605 · 856 in bank
A root cause analysis reveals that a web application outage was caused by one of the company's developers uploading a newer version of the third-party libraries that were shared among several applications. Which of the following implementations would be BEST to prevent this issue from reoccurring?
Show answer
Answer: C
Explanation
To prevent issues arising from the uploading of newer versions of third-party libraries that are shared among several applications, the best approach among the given options is to use Containerization (Option C). Containerization allows each application to be isolated with its specific set of libraries and dependencies, ensuring that changes made to libraries in one container do not affect other applications. This isolation would prevent a newer version of a library uploaded for one application from impacting other applications that share the same library.
Source: Adapted from community discussion — DarexTech100
Question 606 · 856 in bank
The Chief Security Officer (CSO) at a major hospital wants to implement SSO to help improve security in the environment and protect patient data, particularly at shared terminals. The Chief Risk Officer (CRO) is concerned that training and guidance have not been provided to frontline staff, and a risk analysis has not been performed. Which of the following is the MOST likely cause of the CRO's concerns?
Show answer
Answer: D
Explanation
I work in IT at a hospital, and we have designated shared clinical devices utilizing SSO with the clinician's badge and an RFID reader. In a network downtime, the biggest concern is the availability of the SSO, because there would be no way for the identity provider to communicate with the SSO server. In our case, we have designated downtime machines that are always ready to go with a generic service account and a specific downtime application that routinely downloads reports for use by the staff. The staff is trained to use the downtime or "business continuity" workstations in a downtime. The answer that makes sense is D.
Source: Adapted from community discussion — DaEdge
Question 607 · 856 in bank
A software developer needs to perform code-execution testing, black-box testing, and non- functional testing on a new product before its general release. Which of the following BEST describes the tasks the developer is conducting?
Show answer
Answer: B
Explanation
The tasks described by the software developer, including code-execution testing, black-box testing, and non-functional testing, are part of: B. Validation. Validation involves evaluating software to ensure that it meets the requirements and expectations of stakeholders. This includes testing the functionality, performance, and usability of the software to verify that it performs as intended and meets the needs of users. The tasks mentioned, such as code-execution testing (ensuring the code executes correctly), black-box testing (testing the functionality without knowledge of the internal workings), and non-functional testing (testing aspects like performance, security, and usability), all contribute to the validation process by confirming that the software behaves correctly and satisfies the specified requirements.
Source: Adapted from community discussion — Geronemo
Question 608 · 856 in bank
Select 2A cybersecurity administrator needs to implement a Layer 7 security control on a network and block potential attacks. Which of the following can block an attack at Layer 7? (Choose two.)
Show answer
Answer: BD
Explanation
Answer: (B) NIPS and (D) WAF A WAF or web application firewall helps protect web applications by filtering and monitoring HTTP traffic between a web application and the Internet. It typically protects web applications from attacks such as cross-site forgery, cross-site-scripting (XSS), file inclusion, and SQL injection, among others. A WAF is a protocol layer 7 defense (in the OSI model). A network intrusion protection system (NIPS) is an umbrella term for a combination of hardware and software systems that protect computer networks from unauthorized access and malicious activity. NIPS consists of NIDS and IPS. WAF is a firewall. NIPS can operate up to layer 7 by passing or allowing traffic
Source: Adapted from community discussion — rodwave
Question 609 · 856 in bank
Joe, a user at a company, clicked an email link that led to a website that infected his workstation. Joe was connected to the network, and the virus spread to the network shares. The protective measures failed to stop this virus, and it has continued to evade detection. Which of the following should a security administrator implement to protect the environment from this malware?
Show answer
Answer: C
Explanation
Heuristic scanning (or analysis) Heuristic scanning does not rely on a virus dictionary. Instead, it looks for suspicious behavior—anything that does not fit into a “normal” pattern of behavior for the operating system (OS) and applications running on the system being protected. CompTIA Security+ All In One Exam Guide. C
Source: Adapted from community discussion — DChilds
Question 610 · 856 in bank
A security engineer is reviewing log files after a third party discovered usernames and passwords for the organization's accounts. The engineer sees there was a change in the IP address for a vendor website one week earlier. This change lasted eight hours. Which of the following attacks was MOST likely used?
Show answer
Answer: D
Explanation
In DNS poisoning, the attacker changes the DNS records for a legitimate website to point to a malicious website. This can be done by exploiting a vulnerability in the DNS server or by sending a spoofed DNS request. When the victim tries to access the legitimate website, they are redirected to the malicious website instead. The malicious website can then collect the victim's username and password, or it can install malware on the victim's computer. In this case, the change in the IP address for the vendor website is a clue that DNS poisoning was used. The attacker changed the IP address to point to a malicious website, which is where the usernames and passwords were stolen.
Source: Adapted from community discussion — sujon_london
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
SY0-601 practice, question 601. 856 questions available.
About this question bank
Version 1.0.0. How we source questions