A security administrator is using UDP port 514 to send a syslog through an unsecure network to the SIEM server. Which of the following is the best way for the administrator to improve the process?

Add SSL/TLS encryption and use a TCP 6514 port to send logs.

Add LDAP authentication to the SIEM server.

Use a VPN from the internal server to the SIEM and enable DLP.

Add SSL/TLS encryption and use a TCP 6514 port to send logs.

A security analyst received the following requirements for the deployment of a security camera solution:* The cameras must be viewable by the on-site security guards.+ The cameras must be able to communicate with the video storage server.* The cameras must have the time synchronized automatically. * The cameras must not be reachable directly via the internet.* The servers for the cameras and video storage must be available for remote maintenance via the company VPN.Which of the following should the security analyst recommend to securely meet the remote connectivity requirements?

Deploying a jump server that is accessible via the internal network that can communicate with the servers

Creating firewall rules that prevent outgoing traffic from the subnet the servers and cameras reside on

Deploying a jump server that is accessible via the internal network that can communicate with the servers

Disabling all unused ports on the switch that the cameras are plugged into and enabling MAC filtering

Implementing a WAF to allow traffic from the local NTP server to the camera server

Several users have been violating corporate security policy by accessing inappropriate Sites on corporate-issued mobile devices while off campus. The senior leadership team wants all mobile devices to be hardened with controls that:Limit the sites that can be accessedOnly allow access to internal resources while physically on campus.Restrict employees from downloading images from company email Whip of the following controls would best address this situation? (Select two).

Screen lock and PIN requirements

A company is moving to new location. The systems administrator has provided the following server room requirements to the facilities staff:Consistent power levels in case of brownouts or voltage spikes A minimum of 30 minutes runtime following a power outageAbility to trigger graceful shutdowns of critical systemsWhich of the following would BEST meet the requirements?

Deploying an appropriately sized, network-connected UPS device

Maintaining a standby, gas-powered generator

Using large surge suppressors on computer equipment

Configuring managed PDUs to monitor power levels

Deploying an appropriately sized, network-connected UPS device

Which of the following describes software on network hardware that needs to be updated on a rou- tine basis to help address possible vulnerabilities?

Application programming interface

An organization needs to implement more stringent controls over administrator/root credentials and service accounts. Requirements for the project include:* Check-in/checkout of credentials* The ability to use but not know the password* Automated password changes* Logging of access to credentialsWhich of the following solutions would meet the requirements?

A privileged access management system

An OpenID Connect authentication system

The application development team is in the final stages of developing a new healthcare application. The team has requested copies of current PHI records to perform the final testing. Which of the following would be the best way to safeguard this information without impeding the testing process?

Installing a FIM on the application server

A security administrator recently used an internal CA to issue a certificate to a public application. A user tries to reach the application but receives a message stating, “Your connection is not private." Which of the following is the best way to fix this issue?

Send a CSR to a known CA and install the signed certificate on the application's server.

Ignore the warning and continue to use the application normally.

Install the certificate on each endpoint that needs to use the application.

Send the new certificate to the users to install on their browsers.

Send a CSR to a known CA and install the signed certificate on the application's server.

A network security manager wants to implement periodic events that will test the security team's preparedness for incidents in a controlled and scripted manner, Which of the following concepts describes this scenario?

Business continuity plan testing

Which of the following is the correct order of evidence from most to least volatile in forensic analysis?

CPU cache, memory, temporary filesystems, disk

Memory, disk, temporary filesystems, CPU cache

CPU cache, memory, disk, temporary filesystems

CPU cache, memory, temporary filesystems, disk

CPU cache, temporary filesystems, memory, disk

A network penetration tester has successfully gained access to a target machine. Which of the following should the penetration tester do next?

Establish persistence for future use.

Clear the log files of all evidence

Move laterally to another machine.

Establish persistence for future use.

Exploit a zero-day vulnerability.

A company's help desk has received calls about the wireless network being down and users being unable to connect to it. The network administrator says all access pcints are up and running. One of the help desk technicians notices the affected users are working in a near the parking Jot Which Of the following IS the most likely reason for the outage?

Someone near the is jamming the signal.

A user has set up a rogue access point near building.

Someone set up an evil twin access Print in tie affected area.

The APS in the affected area have been from the network

Security analysts notice a server login from a user who has been on vacation for two weeks, The analysts confirm that the user did not log in to the system while on vacation After reviewing packet capture the analysts notice the following:Which of the following occurred?

An attacker used a pass-the-hash attack to gain access.

A buffer overflow was exploited to gain unauthorized access.

The user's account was con-promised, and an attacker changed the login credentials.

An attacker used a pass-the-hash attack to gain access.

An insider threat with username logged in to the account.

CompTIA SY0-601 Practice Test 10 - Free Online Exam Prep & Questions

An employee's company email is configured with conditional access and requires that MFA is enabled and used. An example of MFA is a phone call and:

Become a Premium Member for full access

Unlock Premium Member

CompTIA SY0-601 Practice Test 10

Question

CompTIA SY0-601 Practice Tests

Practice Tests