Recommend To Pass SY0-601 With Test Questions For Completing CompTIA Security+ Certification

Regina2021-07-24T02:27:00+00:00

We recommend to take and pass SY0-601 with real and original SY0-601 test questions for completing CompTIA Security+ certification, because the English version of SY0-501 exam will be retired on July 31, 2021. CompTIA Security+ SY0-601 test questions contain 277 practice exam questions with the accurate answers. You need to read SY0-601 test questions with pdf file and free software, then make sure you have read all SY0-601 exam questions and answers thoroughly. We ensure that you can pass SY0-601 exam with test questions for CompTIA Security+ certification successfully.

If want to check SY0-601 free demo, just come here to read CompTIA Security+ SY0-601 free questions.

Page 1 of 4

1. A local coffee shop runs a small WiFi hot-spot for its customers that utilizes WPA2-PSK. The coffee shop would like to stay current with security trends and wants to implement WPA3 to make its WiFi even more secure .

Which of the following technologies will the coffee shop MOST likely use in place of PSK?

WEP

MSCHAP

WPS

SAE

2. A manufacturer creates designs for very high security products that are required to be protected and controlled by the government regulations. These designs are not accessible by corporate networks or the Internet .

Which of the following is the BEST solution to protect these designs?

An air gap

A Faraday cage

A shielded cable

A demilitarized zone

3. A company uses specially configured workstations tor any work that requires administrator privileges to its Tier 0 and Tier 1 systems. The company follows a strict process to harden systems immediately upon delivery. Even with these strict security measures in place, an incident occurred from one of the workstations. The root cause appears to be that the SoC was tampered with or replaced .

Which of the following MOST likely occurred?

Fileless malware

A downgrade attack

A supply-chain attack

A logic bomb

Misconfigured BIOS

4. A nationwide company is experiencing unauthorized logins at all hours of the day. The logins appear to originate from countries in which the company has no employees .

Which of the following controls should the company consider using as part of its IAM strategy? (Select TWO).

A complex password policy

Geolocation

An impossible travel policy

Self-service password reset

Geofencing

Time-based logins

5. A systems analyst is responsible for generating a new digital forensics chain-of-custody form.

Which of the following should the analyst Include in this documentation? (Select TWO).

The order of volatility

A checksum

The location of the artifacts

The vendor's name

The date and time

A warning banner

6. An attacker was easily able to log in to a company's security camera by performing a basic online search for a setup guide for that particular camera brand and model.

Which of the following BEST describes the configurations the attacker exploited?

Weak encryption

Unsecure protocols

Default settings

Open permissions

7. An information security incident recently occurred at an organization, and the organization was required to report the incident to authorities and notify the affected parties. When the organization's customers became of aware of the incident, some reduced their orders or stopped placing orders entirely .

Which of the following is the organization experiencing?

Reputation damage

Identity theft

Anonymlzation

Interrupted supply chain

8. A financial analyst is expecting an email containing sensitive information from a client. When the email arrives, the analyst receives an error and is unable to open the encrypted message .

Which of the following is the MOST likely cause of the issue?

The S/MME plug-in is not enabled.

The SLL certificate has expired.

Secure IMAP was not implemented

POP3S is not supported.

9. A company recently experienced a data breach and the source was determined to be an executive who was charging a phone in a public area .

Which of the following would MOST likely have prevented this breach?

A firewall

A device pin

A USB data blocker

Biometrics

10. A security analyst is reviewing the following attack log output:

Which of the following types of attacks does this MOST likely represent?

Rainbow table

Brute-force

Password-spraying

Dictionary

Page 2 of 4

11. A security analyst is configuring a large number of new company-issued laptops.

The analyst received the following requirements:

• The devices will be used internationally by staff who travel extensively.

• Occasional personal use is acceptable due to the travel requirements.

• Users must be able to install and configure sanctioned programs and productivity suites.

• The devices must be encrypted

• The devices must be capable of operating in low-bandwidth environments.

Which of the following would provide the GREATEST benefit to the security posture of the devices?

Configuring an always-on VPN

Implementing application whitelisting

Requiring web traffic to pass through the on-premises content filter

Setting the antivirus DAT update schedule to weekly

12. Which of the following job roles would sponsor data quality and data entry initiatives that ensure business and regulatory requirements are met?

The data owner

The data processor

The data steward

The data privacy officer.

13. A company is launching a new internet platform for its clients. The company does not want to implement its own authorization solution but instead wants to rely on the authorization provided by another platform .

Which of the following is the BEST approach to implement the desired solution?

OAuth

TACACS+

SAML

RADIUS

14. A security assessment determines DES and 3DES at still being used on recently deployed production servers .

Which of the following did the assessment identify?

Unsecme protocols

Default settings

Open permissions

Weak encryption

15. A network administrator has been asked to design a solution to improve a company's security posture.

The administrator is given the following, requirements?

• The solution must be inline in the network

• The solution must be able to block known malicious traffic

• The solution must be able to stop network-based attacks

Which of the following should the network administrator implement to BEST meet these requirements?

HIDS

NIDS

HIPS

NIPS

16. An attacker is trying to gain access by installing malware on a website that is known to be visited by the target victims .

Which of the following is the attacker MOST likely attempting?

A spear-phishing attack

A watering-hole attack

Typo squatting

A phishing attack

17. A security analyst is investigating an incident to determine what an attacker was able to do

on a compromised laptop.

The analyst reviews the following SIEM log:

Which of the following describes the method that was used to compromise the laptop?

An attacker was able to move laterally from PC1 to PC2 using a pass-the-hash attack

An attacker was able to bypass application whitelisting by emailing a spreadsheet attachment with an embedded PowerShell in the file

An attacker was able to install malware to the CAasdf234 folder and use it to gam administrator nights and launch Outlook

An attacker was able to phish user credentials successfully from an Outlook user profile

18. Which of the following algorithms has the SMALLEST key size?

DES

Twofish

RSA

AES

19. A security engineer obtained the following output from a threat intelligence source that recently performed an attack on the company's server:

Which of the following BEST describes this kind of attack?

Directory traversal

SQL injection

API

Request forgery

20. A database administrator needs to ensure all passwords are stored in a secure manner, so the administrate adds randomly generated data to each password before string .

Which of the following techniques BEST explains this action?

Predictability

Key stretching

Salting

Hashing

Page 3 of 4

21. A Chief Security Officer (CSO) is concerned about the amount of PII that is stored locally on each salesperson’s laptop. The sales department has a higher-than-average rate of lost equipment .

Which of the following recommendations would BEST address the CSO’s concern?

Deploy an MDM solution.

Implement managed FD

Replace all hard drives with SEDs.

Install DLP agents on each laptop.

22. An attacker is attempting, to harvest user credentials on a client's website. A security analyst notices multiple attempts of random usernames and passwords. When the analyst types in a random username and password. the logon screen displays the following message:

Which of the following should the analyst recommend be enabled?

Input validation

Obfuscation

Error handling

Username lockout

23. A cybersecurity analyst reviews the log files from a web server and sees a series of files that indicates a directory-traversal attack has occurred .

Which of the following is the analyst MOST likely seeing?

A)

Option A

Option B

Option C

Option D

24. A commercial cyber-threat intelligence organization observes IoCs across a variety of unrelated customers.

Prior to releasing specific threat intelligence to other paid subscribers, the organization is MOST likely obligated by contracts to:

perform attribution to specific APTs and nation-state actors.

anonymize any PII that is observed within the IoC data.

add metadata to track the utilization of threat intelligence reports.

assist companies with impact assessments based on the observed data.

25. A security administrator is analyzing the corporate wireless network. The network only has two access points running on channels 1 and 11. While using airodump-ng. the administrator notices other access points are running with the same corporate ESSID on all available channels and with the same BSSID of one of the legitimate access ports.

Which erf the following attacks in happening on the corporate network?

Man in the middle

Evil twin

Jamming

Rogue access point

Disassociation

26. A network engineer needs to create a plan for upgrading the wireless infrastructure in a large office Priority must be given to areas that are currently experiencing latency and connection issues .

Which of the following would be the BEST resource for determining the order of priority?

Nmapn

Heat maps

Network diagrams

Wireshark

27. A document that appears to be malicious has been discovered in an email that was sent to a company's Chief Financial Officer (CFO) .

Which of the following would be BEST to allow a security analyst to gather information and confirm it is a malicious document without executing any code it may contain?

Open the document on an air-gapped network

View the document's metadata for origin clues

Search for matching file hashes on malware websites

Detonate the document in an analysis sandbox

28. A company has determined that if its computer-based manufacturing is not functioning for 12 consecutive hours, it will lose more money that it costs to maintain the equipment .

Which of the following must be less than 12 hours to maintain a positive total cost of ownership?

MTBF

RPO

RTO

MTTR

29. An analyst needs to identify the applications a user was running and the files that were open before the user’s computer was shut off by holding down the power button .

Which of the following would MOST likely contain that information?

NGFW

Pagefile

NetFlow

RAM

30. A network administrator needs to build out a new datacenter, with a focus on resiliency and uptime .

Which of the following would BEST meet this objective? (Choose two.)

Dual power supply

Off-site backups

Automatic OS upgrades

NIC teaming

Scheduled penetration testing

Network-attached storage

Page 4 of 4

31. The Admin workstation should ONLY be able to access the servers on the secure network over the default TFTP port.

Instructions: The firewall will process the rules in a top-down manner in order as a first match. The port number must be typed in and only one port number can be entered per rule Type ANY for all ports. The original firewall configuration can be reset at any time by pressing the reset button. Once you have met the simulation requirements, click save and then Done to submit.

Welcome To Choose Required IT Certification Exams Online

Recommend To Pass SY0-601 With Test Questions For Completing CompTIA Security+ Certification

If want to check SY0-601 free demo, just come here to read CompTIA Security+ SY0-601 free questions.

Author

Leave a Reply Cancel reply