During an incident a company CIRT determine it is necessary to observe the continued network- based transaction between a callback domain and the malware running on an enterprise PC. Which of the following techniques would be BEST to enable this activity while reducing the risk of lateral spread and the risk that the adversary would notice any changes?

Emulate the malware in a heavily monitored DM Z segment.

Physical move the PC to a separate internet pint of presence

Create and apply micro segmentation rules.

Emulate the malware in a heavily monitored DM Z segment.

Apply network blacklisting rules for the adversary domain

A desktop support technician recently installed a new document-scanning software program on a computer. However, when the end user tried to launch the program, it did not respond. Which of the following is MOST likely the cause?

The software was not added to the application whitelist.

A new firewall rule is needed to access the application.

The system was quarantined for missing software updates.

The software was not added to the application whitelist.

The system was isolated from the network due to infected software

A security researcher is tracking an adversary by noting its attacks and techniques based on its capabilities, infrastructure, and victims. Which of the following is the researcher MOST likely using?

The Diamond Model of Intrusion Analysis

one of the attendees starts to notice delays in the connection. and the HTTPS site requests are reverting to HTTP. Which of the following BEST describes what is happening?

Birthday collision on the certificate key

Brute force to the access point

A company wants to modify its current backup strategy to modify its current backup strategy to minimize the number of backups that would need to be restored in case of data loss. Which of the following would be the BEST backup strategy

Full backups followed by incremental backups

Incremental backups followed by differential backups

Full backups followed by incremental backups

Delta backups followed by differential backups

Incremental backups followed by delta backups

Full backup followed by different backups

After a hardware incident, an unplanned emergency maintenance activity was conducted to rectify the issue. Multiple alerts were generated on the SIEM during this period of time. Which of the following BEST explains what happened?

The unexpected traffic correlated against multiple rules, generating multiple alerts.

Multiple alerts were generated due to an attack occurring at the same time.

An error in the correlation rules triggered multiple alerts.

The SIEM was unable to correlate the rules, triggering the alerts.

CompTIA SY0-601 Practice Test 1 - Free Online Exam Prep & Questions

DRAG DROP

A data owner has been tasked with assigning proper data classifications and destruction methods for various types of data contained within the environment.

CompTIA SY0-601 image Question 1 4593366 10022024055400000

Correct answer:

CompTIA SY0-601 image answer Question 1 4593366 10022024055400000

Comment (0)

Explanation:

CompTIA SY0-601 image Question 1 explanation 98690 10022024175400000000

asked 02/10/2024

Shivanth Jha

40 questions

CompTIA SY0-601 Practice Test 1

Question

CompTIA SY0-601 Practice Tests

Practice Tests