SY0-601AssociateCompTIAAll questions freePage 71 of 86

SY0-601 practice questions 701–710

CompTIA Security+ (2020 series)856 questions across 86 pages are complete and free, with no account or card.

Start practising Review syllabus domains

Questions 701–710 · 856 available

Free practiceExam guide

Official study references

856 questions in this bank

Free access · progress saved on this device

Question 701 · 856 in bank
SIMULATION - A company recently added a DR site and is redesigning the network. Users at the DR site are having issues browsing websites. INSTRUCTIONS - Click on each firewall to do the following: 1. Deny cleartext web traffic. 2. Ensure secure management protocols are used. 3. Resolve issues at the DR site. The ruleset order cannot be modified due to outside constraints. If at any time you would like to bring back the initial state of the simulation, please click the Reset All button.
This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.
Show the answer figure
Answer: See figure below
Explanation
FW1: DNS Rule: ANY > ANY > DNS > PERMIT HTTPS Outbound: 10.0.0.1/24 > ANY > HTTPS > PERMIT Management: ANY > ANY > SSH > PERMIT HTTPS Inbound: ANY > 10.0.0.1/24 > HTTPS > PERMIT HTTP Inbound:ANY > ANY > HTTP > DENY FW2: DNS Rule: ANY > ANY > DNS > PERMIT HTTPS Outbound: 10.0.1.1/24 > ANY > HTTPS > PERMIT Management: ANY > ANY > SSH > PERMIT HTTPS Inbound: ANY > 10.0.1.1/24 > HTTPS > PERMIT HTTP Inbound: ANY > ANY > HTTP > DENY FW3: DNS Rule: ANY > ANY > DNS > PERMIT HTTPS Outbound: 192.168.0.1/24 > ANY > HTTPS > PERMIT Management: ANY > ANY > SSH > PERMIT HTTPS Inbound: ANY > 192.168.0.1/24 > HTTPS > PERMIT HTTP Inbound: ANY > ANY > HTTP > DENY
Source: Adapted from community discussion — WinEH
Permanent link to question 701 Report an issue
Question 702 · 856 in bank
DRAG DROP - A data owner has been tasked with assigning proper data classifications and destruction methods for various types of data contained within the environment. INSTRUCTIONS - From the options below, drag each item to its appropriate classification as well as the MOST appropriate form of disposal. If at any time you would like to bring back the initial state of the simulation, please click the Reset All button.
This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.
Show the answer figure
Answer: See figure below
Explanation
THE REAL ANSWER. PII >> 3 PHI >> 6 IP >> 4 CC >> 1,5 Public> 2 ----------------- Degaussing >> 3,4 Shredding >> 1,2,5,6
Source: Adapted from community discussion — j904
Permanent link to question 702 Report an issue
Question 703 · 856 in bank
A security analyst is assessing several company firewalls. Which of the following tools would the analyst most likely use to generate custom packets to use during the assessment?
Show answer
Answer: A
Explanation
hping3 is a network tool able to send custom ICMP/UDP/TCP packets and to display target replies like ping does with ICMP replies. It handles fragmentation and arbitrary packet body and size, and can be used to transfer files under supported protocols. Using hping3, you can test firewall rules, perform (spoofed) port scanning, test network performance using different protocols, do path MTU discovery, perform traceroute-like actions under different protocols, fingerprint remote operating systems, audit TCP/IP stacks, etc. hping3 is scriptable using the Tcl language.
Source: Adapted from community discussion — Yvesr
Permanent link to question 703 Report an issue
Question 704 · 856 in bank
A local business was the source of multiple instances of credit card theft. Investigators found that most payments at this business were made at self-service kiosks. Which of the following is the most likely cause of the exposed credit card Information?
Show answer
Answer: D
Explanation
definition of the word makes sense! Skimming is an illegal practice used by identity thieves to capture credit card information from a cardholder surreptitiously. Fraudsters often use a device called a skimmer that can be installed at gas pumps or ATM machines to collect card data. Some machines act like point-of-sale technology.
Source: Adapted from community discussion — khamva
Permanent link to question 704 Report an issue
Question 705 · 856 in bank
An employee recently resigned from a company. The employee was responsible for managing and supporting weekly batch jobs over the past five years. A few weeks after the employee resigned, one of the batch jobs failed and caused a major disruption. Which of the following would work best to prevent this type of incident from reoccurring?
Show answer
Answer: A
Explanation
job rotation is correct. The employee resigned, so it is not a case of sabotage but a case of no one else to do the job. If there was job rotation, another person would know how to do the job.
Source: Adapted from community discussion — sigidy
Permanent link to question 705 Report an issue
Question 706 · 856 in bank
Following a recent security breach, an analyst discovered that user permissions were added when joining another part of the organization but were not removed from existing groups. Which of the following policies would help to correct these issues in the future?
Show answer
Answer: B
Explanation
B. Account audits Account audits involve regularly reviewing and validating user permissions and access rights. By conducting regular account audits, organizations can identify and rectify issues where user permissions were added but not properly removed, reducing the risk of security breaches due to unnecessary access.
Source: Adapted from community discussion — salah112
Permanent link to question 706 Report an issue
Question 707 · 856 in bank
Which of the following ensures an organization can continue to do business with minimal interruption in the event of a major disaster?
Show answer
Answer: D
Explanation
COOP is similar to BCP, but a federal initiative that intends to encourage organizations to address how critical operations will continue under a broad range of negative circumstances. it addresses emergencies from all hazard approach instead of focusing on a specific event.
Source: Adapted from community discussion — sigidy
Permanent link to question 707 Report an issue
Question 708 · 856 in bank
An organization is planning to roll out a new mobile device policy and issue each employee a new laptop. These laptops would access the users' corporate operating system remotely and allow them to use the laptops for purposes outside of their job roles. Which of the following deployment models is being utilized?
Show answer
Answer: C
Explanation
Bring your own device (BYOD)—the mobile device is owned by the employee. The mobile will have to meet whatever profile is required by the company (in terms of OS version and functionality) and the employee will have to agree on the installation of corporate apps and to some level of oversight and auditing. This model is usually the most popular with employees but poses the most difficulties for security and network managers. Corporate owned, business only (COBO)—the device is the property of the company and may only be used for company business. Corporate owned, personally-enabled (COPE)—the device is chosen and supplied by the company and remains its property. The employee may use it to access personal email and social media accounts and for personal web browsing (subject to whatever acceptable use policies are in force). Choose your own device (CYOD)—much the same as COPE but the employee is given a choice of device from a list.
Source: Adapted from community discussion — stoneface
Permanent link to question 708 Report an issue
Question 709 · 856 in bank
In a rush to meet an end-of-year business goal, the IT department was told to implement a new business application. The security engineer reviews the attributes of the application and decides the time needed to perform due diligence is insufficient from a cybersecurity perspective. Which of the following BEST describes the security engineer's response?
Show answer
Answer: B
Explanation
At no point in the question does it say that the analyst or the company accepted the risk. It is mentioned that in a hastily called meeting, IT was asked to implement a new tool; nowhere does it say that they implemented it, but the security engineer reviews the attributes of the application and decides that the time is not sufficient from a cybersecurity standpoint. In other words, it is expressing RISK TOLERANCE; it is stating that the timelines do not align with the risk tolerance. If the question had added that it was implemented anyway, it would be risk acceptance.
Source: Adapted from community discussion — damianUY
Permanent link to question 709 Report an issue
Question 710 · 856 in bank
A security team created a document that details the order in which critical systems should be brought back online after a major outage. Which of the following documents did the team create?
Show answer
Answer: D
Explanation
D. Disaster recovery plan The document that details the order in which critical systems should be brought back online after a major outage is typically part of the Disaster Recovery Plan (DRP). A Disaster Recovery Plan is a comprehensive document that outlines the procedures and processes for recovering and restoring IT systems and data in the event of a significant disruption or disaster.
Source: Adapted from community discussion — salah112
Permanent link to question 710 Report an issue