CompTIA Security+ (2020 series)856 questions across 86 pages are complete and free, with no account or card.
856 questions in this bank
Free access · progress saved on this device
In which of the following scenarios is tokenization the best privacy technique to use?
Answer: C
It's absolutely for credit card storing. Tokenization replaces data elements with a token, or substitute value. A tokenization system retains both the token and the original value. Tokenization is commonly used with credit cards
Source: Adapted from community discussion — ProdamGarazh
A new vulnerability enables a type of malware that allows the unauthorized movement of data from a system. Which of the following would detect this behavior?
Answer: B
A systems administrator is auditing all company servers to ensure they meet the minimum security baseline. While auditing a Linux server, the systems administrator observes the /etc/shadow file has permissions beyond the baseline recommendation. Which of the following commands should the systems administrator use to resolve this issue?
Answer: A
The chmod, or change mode, command allows an administrator to set or modify a file's permissions. Every UNIX/Linux file has an owner user and an owner group attached to it, and every file has permissions associated with it.
Source: Adapted from community discussion — RedDog2
A security team received the following requirements for a new BYOD program that will allow employees to use personal smartphones to access business email: • Sensitive customer data must be safeguarded. • Documents from managed sources should not be opened in unmanaged destinations. • Sharing of managed documents must be disabled. • Employees should not be able to download emailed images to their devices. • Personal photos and contact lists must be kept private. • IT must be able to remove data from lost/stolen devices or when an employee no longer works for the company. Which of the following are the best features to enable to meet these requirements? (Choose two.)
Answer: AG
Hey y’all, I’m back! I was able to pass with a score of 783/750! Again, thank you everyone who has contributed to the discussion forums & good luck on your future endeavors!
Source: Adapted from community discussion — DarkSonicHDD
Which of the following security controls is used to isolate a section of the network and its externally available resources from the internal corporate network in order to reduce the number of possible attacks?
Answer: B
It's B, they use Air Gapping to separate things that shouldn't be on a network or facing towards the inter-webz. Solely for security reasons since these machines/devices usually don't get updated often/new versions come out of the devices. So Air Gapping comes into play to literally isolate it and have it safe from any kind of attackers. Stuff like this would be SCADA factory equipment, camera systems, or even embedded systems sometimes too. To get to these, you most definitely have to be inside the building physically to get ahold of the equipment if you're not already a part of the company that has the Air Gapped "network." sorry for the long winded speech.
Source: Adapted from community discussion — LayinCable
A security analyst is responding to a malware incident at a company. The malware connects to a command-and-control server on the internet in order to function. Which of the following should the security analyst implement first?
Answer: B
The question explained that it is connecting to a command and control. If the question was asking how would you stop the spread on the network it'd be A but since the emphasis was on the command and control it's B
Source: Adapted from community discussion — mrface33
A company wants to begin taking online orders for products but has decided to outsource payment processing to limit risk. Which of the following best describes what the company should request from the payment processor?
Answer: B
Passed my exam 1/16/2024 with the score of 782. I know this is where the discussions start falling off. Study all the PBQs because all of them were on my exam. A lot of people in this community did a great job at explaining concepts, really remember them. I did so many other practice test and this was by far the best. I failed the first time by one question the second time by 2 questions (while using other practice test). Found this source and benefited the most from it. Also really take a look at the new questions added because if I didn't do that last night, I don't think I would have managed to scrap on by and pass. Good luck everyone and thanks for all the useful information.
Source: Adapted from community discussion — Bmack2134
An employee in the accounting department receives an email containing a demand for payment for services performed by a vendor. However, the vendor is not in the vendor management database. Which of the following is this scenario an example of?
Answer: D
Since stoneface, rodwave, applebees, and most of the other people are gone ill carry on the tradition of giving correct answers. I'm not what ET needs but im what ET gets.
Source: Adapted from community discussion — [Removed]
A company has had several malware incidents that have been traced back to users accessing personal SaaS applications on the internet from the company network. The company has a policy that states users can only access business-related cloud applications from within the company network. Which of the following technical solutions should be used to enforce the policy?
Answer: B
B. Leverage a cloud access security broker (CASB). A CASB can help monitor and enforce security policies for cloud applications, including restricting access to only authorized and business-related applications. It provides visibility into user activities and helps prevent unauthorized access to personal SaaS applications from the company network.
Source: Adapted from community discussion — ha_ha
A security forensics analyst is examining a virtual server. The analyst wants to preserve the present state of the virtual server, including memory contents. Which of the following backup types should be used?
Answer: A
A snapshot preserves the state and data of a virtual machine at a specific point in time. The state includes the virtual machine’s power state (for example, powered-on, powered-off, suspended). The data includes all of the files that make up the virtual machine. This includes disks, memory, and other devices, such as virtual network interface cards. A virtual machine provides several operations for creating and managing snapshots and snapshot chains. These operations let you create snapshots, revert to any snapshot in the chain, and remove snapshots. You can create extensive snapshot trees.
Source: Adapted from community discussion — stoneface
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
SY0-601 practice, question 721. 856 questions available.
Version 1.0.0. How we source questions