Updated Free CompTIA SY0-601 Test Engine Questions with 455 Q&As
The Best CompTIA Security+ SY0-601 Professional Exam Questions
CompTIA SY0-601: Exam Details
The CompTIA SY0-601 exam consists of a maximum of 90 questions. All the questions are to be completed within the allocated time of 90 minutes. The students can expect multiple-choice and performance-based questions during the delivery of the test. This certification exam is available in English, Portuguese, Simplified Chinese, and Japanese. Registration for the test should be done through the Pearson VUE platform and the examinees are required to pay the fee of $349 for it. The individuals can choose from two options of the exam delivery: an online proctored test or an onsite session at one of the centers located worldwide. You can visit the certification webpage to find the testing center that is located nearest to you. To pass CompTIA SY0-601 with flying colors, you need to achieve the passing score of 750 on a scale of 100 to 900 points.
About Security+
Obtaining the Security+ certificate proves that you are proficient in the following:
- You are capable of efficiently & swiftly responding to any appearing security issues and incidents.
- You are knowledgeable about the principles of governance, compliance, and risk;
- You can secure as well as control hybrid environments such as cloud, IoT, and mobile devices.
- You are able to evaluate the security conditions of an organization you are working for and know how to implement suitable security solutions;
NEW QUESTION 187
A security analyst is using a recently released security advisory to review historical logs, looking for the specific activity that was outlined in the advisory. Which of the following is the analyst doing?
- A. Threat hunting
- B. A packet capture
- C. A user behavior analysis
- D. Credentialed vulnerability scanning
Answer: A
NEW QUESTION 188
A company recently moved sensitive videos between on-premises. Company-owned websites. The company then learned the videos had been uploaded and shared to the internet. Which of the following would MOST likely allow the company to find the cause?
- A. A right-to-audit clause
- B. Checksums
- C. Oder of volatility
- D. Watermarks
- E. A log analysis
Answer: E
Explanation:
https://www.sumologic.com/glossary/log-analysis/
"While companies can operate private clouds, forensics in a public cloud are complicated by the right to audit permitted to you by your service level agreement (SLA) with the cloud provider."
NEW QUESTION 189
A recently discovered zero-day exploit utilizes an unknown vulnerability in the SMB network protocol to rapidly infect computers. Once infected, computers are encrypted and held for ransom. Which of the following would BEST prevent this attack from reoccurring?
- A. Verify computers are set to install monthly operating system, updates automatically.
- B. Deny unauthenticated users access to shared network folders.
- C. Configure the perimeter firewall to deny inbound external connections to SMB ports.
- D. Ensure endpoint detection and response systems are alerting on suspicious SMB connections.
Answer: C
NEW QUESTION 190
A security engineer is setting up passwordless authentication for the first time.
INSTRUCTIONS
Use the minimum set of commands to set this up and verify that it works. Commands cannot be reused.
If at any time you would like to bring back the initial state of the simulation, please click the Reset All button.
Answer:
Explanation:
NEW QUESTION 191
The spread of misinformation surrounding the outbreak of a novel virus on election day ted to eligible voters choosing not to take the risk of going to the polls This is an example of:
- A. intimidation
- B. a watering-hole attack
- C. an influence campaign
- D. information elicitation
- E. prepending.
Answer: A
NEW QUESTION 192
Select the appropriate attack andremediation from each drop-down list to label the corresponding attack with its remediation.
INSTRUCTIONS
Not all attacks and remediation actions will be used.
If at any time you would like to bring back the initial state of the simulation, pleaseclick the Reset All button.
Answer:
Explanation:
NEW QUESTION 193
In which of the following common use cases would steganography be employed?
- A. Obfuscation
- B. Integrity
- C. Blockchain
- D. Non-repudiation
Answer: A
NEW QUESTION 194
An organization has hired a security analyst to perform a penetration test. The analyst captures 1Gb worth of inbound network traffic to the server and transfers the pcap back to the machine for analysis. Which of the following tools should the analyst use to further review the pcap?
- A. Nmap
- B. Wireshark
- C. cURL
- D. Netcat
Answer: B
NEW QUESTION 195
A smart retail business has a local store and a newly established and growing online storefront. A recent storm caused a power outage to the business and the local ISP, resulting in several hours of lost sales and delayed order processing. The business owner now needs to ensure two things:
* Protection from power outages
* Always-available connectivity In case of an outage
The owner has decided to implement battery backups for the computer equipment Which of the following would BEST fulfill the owner's second need?
- A. Purchase services from a cloud provider for high availability
- B. Lease a point-to-point circuit to provide dedicated access.
- C. Replace the business's wired network with a wireless network.
- D. Connect the business router to its own dedicated UPS.
Answer: A
NEW QUESTION 196
A company has been experiencing very brief power outages from its utility company over the last few months. These outages only last for one second each time. The utility company is aware of the issue and is working to replace a faulty transformer. Which of the following BEST describes what the company should purchase to ensure its critical servers and network devices stay online?
- A. A generator
- B. A UPS
- C. APDU
- D. Dual power supplies
Answer: B
NEW QUESTION 197
A cybersecurity analyst reviews the log files from a web server and sees a series of files that indicates a directory-traversal attack has occurred. Which of the following is the analyst MOST likely seeing?
A)
B)
C)
D)
- A. Option B
- B. Option A
- C. Option C
- D. Option D
Answer: A
NEW QUESTION 198
A security analyst is reviewing a new website that will soon be made publicly available. The analyst sees the following in the URL:
http://dev-site.comptia.org/home/show.php?sessionID=77276554
The analyst then sends an internal user a link to the new website for testing purposes, and when the user clicks the link, the analyst is able to browse the website with the following URL:
http://dev-site.comptia.org/home/show.php?sessionID=98988475
Which of the following application attacks is being tested?
- A. Object deference
- B. Session replay
- C. Pass-the-hash
- D. Cross-site request forgery
Answer: B
NEW QUESTION 199
A recent malware outbreak across a subnet included successful rootkit installations on many PCs, ensuring persistence by rendering remediation efforts ineffective. Which of the following would BEST detect the presence of a rootkit in the future?
- A. EDR
- B. DLP
- C. FDE
- D. NIDS
Answer: A
NEW QUESTION 200
A security analyst is reviewing logs on a server and observes the following output:
Which of the following is the security analyst observing?
- A. A password-spraying attack
- B. A rainbow table attack
- C. A dictionary attack
- D. A keylogger attack
Answer: C
NEW QUESTION 201
Select the appropriate attack and remediation from each drop-down list to label the corresponding attack with its remediation.
INSTRUCTIONS
Not all attacks and remediation actions will be used.
If at any time you would like to bring back the initial state of the simulation, please click the Reset All button.
Answer:
Explanation:
NEW QUESTION 202
A cybersecurity analyst reviews the log files from a web server and sees a series of files that indicates a directory-traversal attack has occurred. Which of the following is the analyst MOST likely seeing?
A)
B)
C)
D)
- A. Option B
- B. Option A
- C. Option C
- D. Option D
Answer: A
NEW QUESTION 203
A security analyst needs to generate a server certificate to be used for 802.1X and secure RDP connections.
The analyst is unsure what is required to perform the task and solicits help from a senior colleague. Which of the following is the FIRST step the senior colleague will most likely tell the analyst to perform to accomplish this task?
- A. Create a CRL
- B. Generate a .pfx file
- C. Generate a CSR
- D. Create an OCSP
Answer: C
NEW QUESTION 204
A security analyst has been asked to investigate a situation after the SOC started to receive alerts from the SIEM. The analyst first looks at the domain controller and finds the following events:
To better understand what is going on, the analyst runs a command and receives the following output:
Based on the analyst's findings, which of the following attacks is being executed?
- A. Spraying
- B. Keylogger
- C. Credential harvesting
- D. Brute-force
Answer: A
NEW QUESTION 205
A security analyst is reviewing the following attack log output:
Which of the following types of attacks does this MOST likely represent?
- A. Rainbow table
- B. Dictionary
- C. Brute-force
- D. Password-spraying
Answer: D
NEW QUESTION 206
An organization recently recovered from a data breach. During the root cause analysis, the organization determined the source of the breach to be a personal cell phone that had been reported lost. Which of the following solutions should the organization implement to reduce the likelihood of future data breaches?
- A. MDM
- B. MAM
- C. VDI
- D. DLP
Answer: A
NEW QUESTION 207
A security engineer has enabled two-factor authentication on all workstations. Which of the following approaches are the MOST secure? (Choose two.)
- A. Password and one-time token
- B. Password and voice
- C. Password and smart card
- D. Password and security question
- E. Password and fingerprint
- F. Password and CAPTCHA
Answer: C,E
Explanation:
Explanation/Reference:
NEW QUESTION 208
The cost of 'movable media and the security risks of transporting data have become too great for a laboratory. The laboratory has decided to interconnect with partner laboratones to make data transfers easier and more secure. The Chief Security Officer <CSO) has several concerns about proprietary data being exposed once the interconnections are established. Which of the following security features should the network administrator implement lo prevent unwanted data exposure to users in partner laboratories?
- A. DLP running on hosts to prevent file transfers between networks
- B. NAC that permits only data-transfer agents to move data between networks
- C. VPN with full tunneling and NAS authenticating through the Active Directory
- D. VLAN zoning with a file-transfer server in an external-facing zone
Answer: A
NEW QUESTION 209
......
Try 100% Updated SY0-601 Exam Questions [2021]: https://www.passcollection.com/SY0-601_real-exams.html
Pass SY0-601 Exam - Real Questions & Answers: https://drive.google.com/open?id=1-P-5nY6YpKwoc0OujbcHAFwPowHqpN5h
