New Updated CompTIA SY0-601 Exam Questions

dumps2022-03-14T02:05:13+08:00

Are you worried about passing CompTIA Security+ SY0-601 exam? We just updated our CompTIA certification SY0-601 exam questions and answers, which can make sure you pass the test. Study our updated CompTIA SY0-601 questions, you can clear the test easily. Free CompTIA Security+ SY0-601 exam updated questions are below.

Page 1 of 3

1. Which of the following BEST describes a social-engineering attack that relies on an executive at a small business visiting a fake banking website where credit card and account details are harvested?

Whaling

Spam

Invoice scam

Pharming

2. An organization would like to remediate the risk associated with its cloud service provider not meeting its advertised 99.999% availability metrics .

Which of the following should the organization consult for the exact requirements for the cloud provider?

SLA

BPA

NDA

MOU

3. A client sent several inquiries to a project manager about the delinquent delivery status of some critical reports. The project manager claimed the reports were previously sent via email, but then quickly generated and backdated the reports before submitting them as plain text within the body of a new email message thread .

Which of the following actions MOST likely supports an investigation for fraudulent submission?

Establish chain of custody.

Inspect the file metadata.

Reference the data retention policy.

Review the email event logs

4. Customers reported their antivirus software flagged one of the company’s primary software products as suspicious. The company’s Chief Information Security Officer has tasked the developer with determining a method to create a trust model between the software and the customer’s antivirus software .

Which of the following would be the BEST solution?

A. Code signing

B. Domain validation

C. Extended validation

A. Self-signing

5. Entering a secure area requires passing through two doors, both of which require someone who is already inside to initiate access .

Which of the following types of physical security controls does this describe?

Cameras

Faraday cage

Access control vestibule

Sensors

Guards

6. While reviewing the wireless router, the systems administrator of a small business determines someone is spoofing the MAC address of an authorized device.

Given the table below:

Which of the following should be the administrator's NEXT step to detect if there is a rogue system without impacting availability?

Conduct a ping sweep.

Physically check each system,

Deny Internet access to the "UNKNOWN" hostname.

Apply MAC filtering,

7. An organization has expanded its operations by opening a remote office. The new office is fully furnished with office resources to support up to 50 employees working on any given day .

Which of the following VPN solutions would BEST support the new office?

Always On

Remote access

Site-to-site

Full tunnel

8. A nationwide company is experiencing unauthorized logins at all hours of the day. The logins appear to originate from countries in which the company has no employees .

Which of the following controls. should the company consider using as part of its IAM strategy? (Select TWO).

A complex password policy

Geolocation

An impossible travel policy

Self-service password reset

Geofencing

Time-based logins

9. A security analyst is reviewing a penetration-testing report from a third-party contractor. The penetration testers used the organization's new API to bypass a driver to perform privilege escalation on the organization's web servers. Upon looking at the API, the security analyst realizes the particular API call was to a legacy system running an outdated OS .

Which of the following is the MOST likely attack type?

Request forgery

Session replay

DLL injection

Shimming

10. Which of the following BEST describes the MFA attribute that requires a callback on a predefined landline?

Something you exhibit

Something you can do

Someone you know

Somewhere you are

Page 2 of 3

11. A security analyst is investigating a vulnerability in which a default file permission was set incorrectly. The company uses non-credentialed scanning for vulnerability management.

Which of the following tools can the analyst use to verify the permissions?

ssh

chmod

setuid

nessus

12. An analyst is generating a security report for the management team. Security guidelines recommend disabling all listening unencrypted services.

Given this output from Nmap.

Which of the following should the analyst recommend to disable?

21/tcp

22/tcp

23/tcp

443/tcp

13. Users reported several suspicious activities within the last two weeks that resulted in several unauthorized transactions.

Upon investigation, the security analyst found the following:

✑ Multiple reports of breached credentials within that time period

✑ Traffic being redirected in certain parts of the network

✑ Fraudulent emails being sent by various internal users without their consent.

Which of the following types of attacks was MOST likely used?

Replay attack

Race condition

Cross site scripting

Request forgeries

14. A company would like to provide flexibility for employees on device preference. However, the company is concerned about supporting too many different types of hardware .

Which of the following deployment models will provide the needed flexibility with the GREATEST amount of control and security over company data and infrastructure?

BYOD

VDI

COPE

CYOD

15. Which of the following environments would MOST likely be used to assess the execution of component parts of a system at both the hardware and software levels and to measure performance characteristics?

Test

Staging

Development

Production

16. An external forensics investigator has been hired to investigate a data breach at a large enterprise with numerous assets. It is known that the breach started in the DMZ and moved to the sensitive information, generating multiple logs as the attacker traversed through the network .

Which of the following will BEST assist with this investigation?

Perform a vulnerability scan to identity the weak spots.

Use a packet analyzer to Investigate the NetFlow traffic.

Check the SIEM to review the correlated logs.

Require access to the routers to view current sessions.

17. A developer is concerned about people downloading fake malware-infected replicas of a popular game .

Which of the following should the developer do to help verify legitimate versions of the game for users?

Digitally sign the relevant game files.

Embed a watermark using steganography.

Implement TLS on the license activation server.

Fuzz the application for unknown vulnerabilities.

18. A company installed several crosscut shredders as part of increased information security practices targeting data leakage risks .

Which of the following will this practice reduce?

Dumpster diving

Shoulder surfing

Information elicitation

Credential harvesting

19. A security administrator is trying to determine whether a server is vulnerable to a range of attacks.

After using a tool, the administrator obtains the following output:

Which of the following attacks was successfully implemented based on the output?

Memory leak

Race conditions

SQL injection

Directory traversal

20. A company just developed a new web application for a government agency. The application must be assessed and authorized prior to being deployed .

Which of the following is required to assess the vulnerabilities resident in the application?

Repository transaction logs

Common Vulnerabilities and Exposures

Static code analysis

Non-credentialed scans

Page 3 of 3

21. To mitigate the impact of a single VM being compromised by another VM on the same hypervisor, an administrator would like to utilize a technical control to further segregate the traffic .

Which of the following solutions would BEST accomplish this objective?

Install a hypervisor firewall to filter east-west traffic.

Add more VLANs to the hypervisor network switches.

Move exposed or vulnerable VMs to the DM

Implement a zero-trust policy and physically segregate the hypervisor servers.

22. An organization relies on third-party video conferencing to conduct daily business. Recent security changes now require all remote workers to utilize a VPN to corporate resources .

Which of the following would BEST maintain high-quality video conferencing while minimizing latency when connected to the VPN?

Using geographic diversity to have VPN terminators closer to end users

Utilizing split tunneling so only traffic for corporate resources is encrypted

Purchasing higher-bandwidth connections to meet the increased demand

Configuring QoS properly on the VPN accelerators

23. An.. that has a large number of mobile devices is exploring enhanced security controls to manage unauthorized access if a device is lost or stolen. Specifically, if mobile devices are more

than 3mi (4 8km) from the building, the management team would like to have the security team alerted and server resources restricted on those devices .

Which of the following controls should the organization implement?

Geofencing

Lockout

Near-field communication

GPS tagging

24. Preconfigure the client for an incoming guest.

The guest AD credentials are:

User: guest01

Password: guestpass

25. An organization plans to transition the intrusion detection and prevention techniques on a critical subnet to an anomaly-based system .

Which of the following does the organization need to determine for this to be successful?

The baseline

The endpoint configurations

The adversary behavior profiles

The IPS signatures

26. The Admin workstation should ONLY be able to access the servers on the secure network over the default TFTP port.

Instructions: The firewall will process the rules in a top-down manner in order as a first match. The port number must be typed in and only one port number can be entered per rule Type ANY for all ports. The original firewall configuration can be reset at any time by pressing the reset button. Once you have met the simulation requirements, click save and then Done to submit.

Hot Area:

New Updated CompTIA SY0-601 Exam Questions

New Updated CompTIA SY0-601 Exam Questions

Share this post

Leave a Reply Cancel reply

Related Posts