SY0-601AssociateCompTIAAll questions freePage 7 of 86

SY0-601 practice questions 61–70

CompTIA Security+ (2020 series)856 questions across 86 pages are complete and free, with no account or card.

Start practising Review syllabus domains

Questions 61–70 · 856 available

Free practiceExam guide

Official study references

856 questions in this bank

Free access · progress saved on this device

Question 61 · 856 in bank
HOTSPOT - Select the appropriate attack and remediation from each drop-down list to label the corresponding attack with its remediation. INSTRUCTIONS - Not all attacks and remediation actions will be used. If at any time you would like to bring back the initial state of the simulation, please click the Reset All button. Hot Area:
This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.
Show the answer figure
Answer: See figure below
Explanation
I agree with this selection with exception of the third. As the example given is a SQL Database, I'd say 'Change default application password;.
Source: Adapted from community discussion — vi2
Permanent link to question 61 Report an issue
Question 62 · 856 in bank
SIMULATION - An attack has occurred against a company. INSTRUCTIONS - You have been tasked to do the following: ✑ Identify the type of attack that is occurring on the network by clicking on the attacker's tablet and reviewing the output. ✑ Identify which compensating controls a developer should implement on the assets, in order to reduce the effectiveness of future attacks by dragging them to the correct server. All objects will be used, but not all placeholders may be filled. Objects may only be used once. If at any time you would like to bring back the initial state of the simulation, please click the Reset All button.
This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.
Show the answer figure
Answer: See figure below
Explanation
I think this is correct. Application Source Code -> Code Review CRM Server - > Record Level access Control Web Server -> WAF and URL Filtering - I initially went with Input Validation instead of URL filtering, but URL filtering works by comparing all web traffic against URL filters, which are typically contained in a database of sites that users are permitted to access or denied from accessing. Database ->Input validation
Source: Adapted from community discussion — stoneface
Permanent link to question 62 Report an issue
Question 63 · 856 in bank
SIMULATION - A systems administrator needs to install a new wireless network for authenticated guest access. The wireless network should support 802.1X using the most secure encryption and protocol available. INSTRUCTIONS - Perform the following steps: 4. Configure the RADIUS server. 5. Configure the WiFi controller. 6. Preconfigure the client for an incoming guest. The guest AD credentials are: User: guest01 - Password: guestpass - If at any time you would like to bring back the initial state of the simulation, please click the Reset All button.
This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.
Show the answer figure
Answer: See figure below
Explanation
Configure the settings as shown below:
Source: Adapted from community discussion — DUCKDOG
Permanent link to question 63 Report an issue
Question 64 · 856 in bank
HOTSPOT - An incident has occurred in the production environment. INSTRUCTIONS - Analyze the command outputs and identify the type of compromise. If at any time you would like to bring back the initial state of the simulation, please click the Reset All button. Hot Area:
This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.
Show the answer figure
Answer: See figure below
Explanation
Logic Bomb and Backdoor First compromise relies on a cronjob that will be executed each five minutes Second compromise is opening port 31337 , https://www.eicar.org/download/eicar.com.txt is a file to test AV products, instead of using real malware, which could cause real damage, this test file allows people to test anti-virus software without having to use a real computer virus
Source: Adapted from community discussion — stoneface
Permanent link to question 64 Report an issue
Question 65 · 856 in bank
A large bank with two geographically dispersed data centers is concerned about major power disruptions at both locations. Every day each location experiences very brief outages that last for a few seconds. However, during the summer a high risk of intentional brownouts that last up to an hour exists, particularly at one of the locations near an industrial smelter. Which of the following is the BEST solution to reduce the risk of data loss?
Show answer
Answer: C
Explanation
If ups is not in the option, the answer here is Generator…..I passed my exam and this question appeared but ups wasn’t in the option so I went with Generator….
Source: Adapted from community discussion — apata123
Permanent link to question 65 Report an issue
Question 66 · 856 in bank
Which of the following would be indicative of a hidden audio file found inside of a piece of source code?
Show answer
Answer: A
Explanation
Steganography is the technique of hiding secret data within an ordinary, non-secret, file or message in order to avoid detection. It's essentially being able to hide in plain sight. The question is referring to a hidden file not some form of encryption, Steganography is not an encryption method but can be used with encryption to add an extra step for protecting data. ============================== Other Choices: Homomorphic encryption - An encryption algorithm designed to allow calculations to be performed on the encrypted data without requiring access to a secret key to decrypt the data. The result of such a computation remains in encrypted form, and can at a later point, the original data can be accessed with the proper decryption key. This allows critical and sensitive data to be outsourced to third-parties without posing a serious risk to the original owner of that data. Cipher suite - Algorithms/Instructions required to enable secure network connections between servers and clients through TLS(SSL). Blockchain - A shared, immutable ledger that facilitates the process of recording transactions and tracking assets in a business network.
Source: Adapted from community discussion — rodwave
Permanent link to question 66 Report an issue
Question 67 · 856 in bank
Which of the following would be the BEST way to analyze diskless malware that has infected a VDI?
Show answer
Answer: B
Explanation
Take a snapshot of the VDI would allow to both analyze and temporary isolate the threat as we can then shut it down to proceed to futher analyze the snapshot
Source: Adapted from community discussion — stoneface
Permanent link to question 67 Report an issue
Question 68 · 856 in bank
Users are presented with a banner upon each login to a workstation. The banner mentions that users are not entitled to any reasonable expectation of privacy and access is for authorized personnel only. In order to proceed past that banner, users must click the OK button. Which of the following is this an example of?
Show answer
Answer: A
Explanation
A. AUP (Acceptable Use Policy) The scenario described is an example of an Acceptable Use Policy (AUP). An AUP is a set of rules and guidelines that specify the acceptable and prohibited actions users must follow when using an organization's information systems or network resources. The banner displayed upon login serves as a notice to users about their responsibilities, the limitations on privacy, and the conditions for authorized access. Options B, C, and D are not relevant to the scenario: B. NDA (Non-Disclosure Agreement) is a legal contract that outlines confidential information that individuals or employees must not disclose to others outside of the organization. C. SLA (Service Level Agreement) is a contract or agreement that defines the level of service expected between a service provider and a customer. D. MOU (Memorandum of Understanding) is an agreement between two or more parties to define their mutual understanding on a specific matter.
Source: Adapted from community discussion — Protract8593
Permanent link to question 68 Report an issue
Question 69 · 856 in bank
The Chief Information Security Officer is concerned about employees using personal email rather than company email to communicate with clients and sending sensitive business information and PII. Which of the following would be the BEST solution to install on the employees' workstations to prevent information from leaving the company's network?
Show answer
Answer: B
Explanation
DLP enables businesses to detect data loss, as well as prevent the illicit transfer of data outside the organization and the unwanted destruction of sensitive or personally identifiable data (PII).
Source: Adapted from community discussion — tibetbey
Permanent link to question 69 Report an issue
Question 70 · 856 in bank
On the way into a secure building, an unknown individual strikes up a conversation with an employee. The employee scans the required badge at the door while the unknown individual holds the door open, seemingly out of courtesy, for the employee. Which of the following social engineering techniques is being utilized?
Show answer
Answer: C
Explanation
Tailgating is following someone who has access to a secure into that area without having access yourself. Shoulder surfing is looking at information that someone who has access to it is looking at over their shoulder /while they have it open to view when you shouldn't otherwise have access to that information. This sounds more like Tailgating than Shoulder surfing for sure.
Source: Adapted from community discussion — CertAddict69
Permanent link to question 70 Report an issue