The Secret Of CompTIA SY0-601 Actual Exam

NEW QUESTION 1
Joe, a user at a company, clicked an email link led to a website that infected his workstation. Joe, was connected to the network, and the virus spread to the network shares. The protective measures failed to stop this virus, and It has continues to evade detection. Which of the following should administrator implement to protect the environment from this malware?

• A. Install a definition-based antivirus.
• B. Implement an IDS/IPS
• C. Implement a heuristic behavior-detection solution.
• D. Implement CASB to protect the network shares.

Answer: C

NEW QUESTION 2
A security administrator suspects an employee has been emailing proprietary information to a competitor. Company policy requires the administrator to capture an exact copy of the employee’s hard disk. Which of the following should the administrator use?

• A. dd
• B. chmod
• C. dnsenum
• D. logger

Answer: A

NEW QUESTION 3
An organization is developing a plan in the event of a complete loss of critical systems and data. Which of the following plans is the organization MOST likely developing?

• A. Incident response
• B. Communications
• C. Disaster recovery
• D. Data retention

Answer: C

NEW QUESTION 4
A security analyst is performing a packet capture on a series of SOAP HTTP requests for a security assessment. The analyst redirects the output to a file After the capture is complete, the analyst needs to review the first transactions quickly and then search the entire series of requests for a particular string Which of the following would be BEST to use to accomplish the task? (Select TWO).

• A. head
• B. Tcpdump
• C. grep
• D. rail
• E. curl
• F. openssi
• G. dd

Answer: AB

NEW QUESTION 5
A security engineer needs to enhance MFA access to sensitive areas in a building. A key card and fingerprint scan are already in use. Which of the following would add another factor of authentication?

• A. Hard token
• B. Retina scan
• C. SMS text
• D. Keypad PIN

Answer: B

NEW QUESTION 6
A security auditor is reviewing vulnerability scan data provided by an internal security team. Which of the following BEST indicates that valid credentials were used?

• A. The scan results show open ports, protocols, and services exposed on the target host
• B. The scan enumerated software versions of installed programs
• C. The scan produced a list of vulnerabilities on the target host
• D. The scan identified expired SSL certificates

Answer: B

NEW QUESTION 7
A security administrator checks the table of a network switch, which shows the following output:

Which of the following is happening to this switch?

• A. MAC Flooding
• B. DNS poisoning
• C. MAC cloning
• D. ARP poisoning

Answer: A

NEW QUESTION 8
Local guidelines require that all information systems meet a minimum-security baseline to be compliant. Which of the following can security administrators use to assess their system configurations against the baseline?

• A. SOAR playbook
• B. Security control matrix
• C. Risk management framework
• D. Benchmarks

Answer: D

NEW QUESTION 9
A root cause analysis reveals that a web application outage was caused by one of the company’s developers uploading a newer version of the third-party libraries that were shared among several applications. Which of the following implementations would be BEST to prevent the issue from reoccurring?

• A. CASB
• B. SWG
• C. Containerization
• D. Automated failover

Answer: C

NEW QUESTION 10
A well-known organization has been experiencing attacks from APIs. The organization is concerned that custom malware is being created and emailed into the company or installed on USB sticks that are dropped in parking lots. Which of the following is the BEST defense against this scenario?

• A. Configuring signature-based antivirus io update every 30 minutes
• B. Enforcing S/MIME for email and automatically encrypting USB drives upon insertion.
• C. Implementing application execution in a sandbox for unknown software.
• D. Fuzzing new files for vulnerabilities if they are not digitally signed

Answer: C

NEW QUESTION 11
An analyst needs to identify the applications a user was running and the files that were open before the user’s computer was shut off by holding down the power button. Which of the following would MOST likely contain that information?

• A. NGFW
• B. Pagefile
• C. NetFlow
• D. RAM

Answer: C

NEW QUESTION 12
An engineer wants to access sensitive data from a corporate-owned mobile device. Personal data is not allowed on the device. Which of the following MDM configurations must be considered when the engineer travels for business?

• A. Screen locks
• B. Application management
• C. Geofencing
• D. Containerization

Answer: D

NEW QUESTION 13
A smart retail business has a local store and a newly established and growing online storefront. A recent storm caused a power outage to the business and the local ISP, resulting in several hours of lost sales and delayed order processing. The business owner now needs to ensure two things:
* Protection from power outages
* Always-available connectivity In case of an outage
The owner has decided to implement battery backups for the computer equipment Which of the following would BEST fulfill the owner's second need?

• A. Lease a point-to-point circuit to provide dedicated access.
• B. Connect the business router to its own dedicated UPS.
• C. Purchase services from a cloud provider for high availability
• D. Replace the business's wired network with a wireless network.

Answer: C

NEW QUESTION 14
An organization's RPO for a critical system is two hours. The system is used Monday through Friday, from 9:00 am to 5:00 pm. Currently, the organization performs a full backup every Saturday that takes four hours to complete. Which of the following additional backup implementations would be the BEST way for the analyst to meet the business requirements?

• A. Incremental backups Monday through Friday at 6:00 p.m and differential backups hourly
• B. Full backups Monday through Friday at 6:00 p.m and incremental backups hourly.
• C. incremental backups Monday through Friday at 6:00 p.m and full backups hourly.
• D. Full backups Monday through Friday at 6:00 p.m and differential backups hourly.

Answer: A

NEW QUESTION 15
Which of the following will MOST likely adversely impact the operations of unpatched traditional programmable-logic controllers, running a back-end LAMP server and OT systems with human-management interfaces that are accessible over the Internet via a web interface? (Choose two.)

• A. Cross-site scripting
• B. Data exfiltration
• C. Poor system logging
• D. Weak encryption
• E. SQL injection
• F. Server-side request forgery

Answer: DF

NEW QUESTION 16
A company needs to centralize its logs to create a baseline and have visibility on its security events. Which of the following technologies will accomplish this objective?

• A. Security information and event management
• B. A web application firewall
• C. A vulnerability scanner
• D. A next-generation firewall

Answer: A

NEW QUESTION 17
A technician needs to prevent data loss in a laboratory. The laboratory is not connected to any external networks. Which of the following methods would BEST prevent data? (Select TWO)

• A. VPN
• B. Drive encryption
• C. Network firewall
• D. File-level encryption
• E. USB blocker
• F. MFA

Answer: BE

NEW QUESTION 18
Which of the following would be the BEST resource lor a software developer who is looking to improve secure coding practices for web applications?

• A. OWASP
• B. Vulnerability scan results
• C. NIST CSF
• D. Third-party libraries

Answer: A

NEW QUESTION 19
A network engineer needs to build a solution that will allow guests at the company’s headquarters to access the Internet via WiFi. This solution should not allow access to the internal corporate network, but it should require guests to sign off on the acceptable use policy before accessing the Internet. Which of the following should the engineer employ to meet these requirements?

• A. Implement open PSK on the APs
• B. Deploy a WAF
• C. Configure WIPS on the APs
• D. Install a captive portal

Answer: D

NEW QUESTION 20
Which of the following is MOST likely to outline the roles and responsibilities of data controllers and data processors?

• A. SSAE SOC 2
• B. PCI DSS
• C. GDPR
• D. ISO 31000

Answer: C

NEW QUESTION 21
A network engineer notices the VPN concentrator overloaded and crashes on days when there are a lot of remote workers. Senior management has placed greater importance on the availability of VPN resources for the remote workers than the security of the end users’ traffic. Which of the following would be BEST to solve this issue?

• A. iPSec
• B. Always On
• C. Split tunneling
• D. L2TP

Answer: B

NEW QUESTION 22
A user is concerned that a web application will not be able to handle unexpected or random input without crashing. Which of the following BEST describes the type of testing the user should perform?

• A. Code signing
• B. Fuzzing
• C. Manual code review
• D. Dynamic code analysis

Answer: D

NEW QUESTION 23
A security engineer is setting up passwordless authentication for the first time. INSTRUCTIONS
Use the minimum set of commands to set this up and verify that it works. Commands cannot be reused.
If at any time you would like to bring back the initial state of the simulation, please click the Reset All button.

• A. Mastered
• B. Not Mastered

Answer: A

Explanation:

NEW QUESTION 24
An organization needs to implement more stringent controls over administrator/root credentials and service accounts. Requirements for the project include:
Check-in/checkout of credentials
The ability to use but not know the password
Automated password changes
Logging of access to credentials
Which of the following solutions would meet the requirements?

• A. OAuth 2.0
• B. Secure Enclave
• C. A privileged access management system
• D. An OpenID Connect authentication system

Answer: D

NEW QUESTION 25
Which of the following relets to applications and systems that are used within an organization without consent or approval?

• A. Shadow IT
• B. OSINT
• C. Dark web
• D. Insider threats

Answer: A

NEW QUESTION 26
......