CompTIA Security+ (2020 series)856 questions across 86 pages are complete and free, with no account or card.
856 questions in this bank
Free access · progress saved on this device
Which of the following control types is focused primarily on reducing risk before an incident occurs?
Answer: A
"Preventive controls act before an event, preventing it from advancing". Deterrent - "acts to discourage the attacker by reducing the likelhood of success from the perspective of the attacker".
Source: Adapted from community discussion — carpathia
A threat actor was able to use a username and password to log in to a stolen company mobile device. Which of the following provides the best solution to increase mobile data security on all employees’ company mobile devices?
Answer: D
here is my update as promised. I took 601 exam and passed as ~800 1. review all PBQs here , basically 153, 155, 156,157, 725, 726,731, 733, 734. the PBQ i got are all from these. 2. i reviewed 600-860 twice or more, made cards with questions i did wrong and tried to remember it if I don't understand it. When I finished exam there is still quite some time left, i think this card exercise help me to increase the speed. then you got time left to focus on questions not so sure of. 3. i worked like 10 hrs per week, but last four days worked more than 4 hrs each day. together like about 30+16hrs. i have 4+ yrs software developer experience though. YOU CAN DO THIS!! GOOD LUCK!!
Source: Adapted from community discussion — spearous
A systems administrator reports degraded performance on a virtual server. The administrator increases the virtual memory allocation, which improves conditions, but performance degrades again after a few days. The administrator runs an analysis tool and sees the following output: ==3214== timeAttend.exe analyzed ==3214== ERROR SUMMARY: ==3214== malloc/free: in use at exit: 4608 bytes in 18 blocks. ==3214== checked 82116 bytes ==3214== definitely lost: 4608 bytes in 18 blocks. The administrator terminates the timeAttend.exe, observes system performance over the next few days, and notices that the system performance does not degrade. Which of the following issues is MOST likely occurring?
Answer: D
Definitely memory leak ' key sentence' -> The administrator increases the virtual memory allocation, which improves conditions, but performance degrades again after a few days. Memory leak occurs when programmers create a memory in heap and forget to delete it. The consequences of memory leak is that it reduces the performance of the computer by reducing the amount of available memory. Eventually, in the worst case, too much of the available memory may become allocated and all or part of the system or device stops working correctly, the application fails, or the system slows down vastly .
Source: Adapted from community discussion — stoneface
An administrator is experiencing issues when trying to upload a support file to a vendor. A pop-up message reveals that a payment card number was found in the file, and the file upload was blocked. Which of the following controls is most likely causing this issue and should be checked FIRST?
Answer: A
DLP - Data Loss Prevention uses exact data matching or regex matching - in this case a regex rule for detecting credit card numbers could be in place that is actively blocking the upload of the document - Regex for detecting and Amex Card: ^3[47][0-9]{13}$ Source https://stackoverflow.com/questions/9315647/regex-credit-card-number-tests
Source: Adapted from community discussion — stoneface
Which of the following risk management strategies would an organization use to maintain a legacy system with known risks for operational purposes?
Answer: A
Accepting risk, or risk acceptance, occurs when a business or individual acknowledges that the potential loss from a risk is not great enough to warrant spending money to avoid it.
Source: Adapted from community discussion — stoneface
A report delivered to the Chief Information Security Officer (CISO) shows that some user credentials could be exfiltrated. The report also indicates that users tend to choose the same credentials on different systems and applications. Which of the following policies should the CISO use to prevent someone from using the exfiltrated credentials?
Answer: A
You can’t “use” the account if you can’t log into it without the 2nd part of authentication. The problem with this question that I really hate is it leads to 2 different answers because it says prevent use but yet also talks about “policy”. Password History won’t do anything to prevent stolen credentials unless the policy being implemented instantly forces everyone to change their password “right now” which password history normally just means you can’t reuse the same password again after you are forced to change it be it a 30 days or 60 days later. MFA may not be a policy but it insantly prevents the issue of stolen credentials being used to log in after MFA has been enabled. It’s a stupid catch 22 question because MFA would fix the stolen credentials problem instantly. The moment the thieves use the password, a prompt for a Token digit (or whatever the 2nd authentication is) will be requested. MFA would definitely prevent.
Source: Adapted from community discussion — Skymaster8182
Which of the following is the BEST action to foster a consistent and auditable incident response process?
Answer: B
I think is B, because there are 2 requirements " Consistent & Auditable". D, will foster consistent IR process, but not auditable. B, will ensure consistency in understanding in IR process & document is auditable.
Source: Adapted from community discussion — G4ct756
During a recent penetration test, the tester discovers large amounts of data were exfiltrated over the course of 12 months via the internet. The penetration tester stops the test to inform the client of the findings. Which of the following should be the client's NEXT step to mitigate the issue?
Answer: B
Perform containment on the critical servers and resources -> Isolation or containment is the first thing to do after an incident has been discovered
Source: Adapted from community discussion — stoneface
A security analyst is designing the appropriate controls to limit unauthorized access to a physical site. The analyst has a directive to utilize the lowest possible budget. Which of the following would BEST meet the requirements?
Answer: C
To meet the requirement of utilizing the lowest possible budget, the security analyst should consider using deterrent controls. Deterrent controls are security measures that are designed to discourage potential attackers from attempting to gain unauthorized access to a site. These controls typically involve visible measures such as signage, fencing, and security guards, and are intended to make it clear to potential attackers that unauthorized access will not be tolerated. Deterrent controls are often less expensive than other types of controls, such as preventive or detective controls, and can be an effective way to limit unauthorized access without breaking the budget.
Source: Adapted from community discussion — NovaWarrior
A company is looking to migrate some servers to the cloud to minimize its technology footprint. The company has 100 databases that are on premises. Which of the following solutions will require the LEAST management and support from the company?
Answer: A
I think this is one of those questions where real-life experience doesn't answer the question correctly here. The question seems to be focusing more on which form of cloud computing requires the LEAST amount of management (SaaS) with the database part of the question being filler.
Source: Adapted from community discussion — Hewn
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
SY0-601 practice, question 841. 856 questions available.
Version 1.0.0. How we source questions