Which Of the following supplies non-repudiation during a forensics investiga-tion?

a SHA 2 signature of a drive image

Dumping volatile memory contents first

a SHA 2 signature of a drive image

Logging everyone in contact with evidence

A research company discovered that an unauthorized piece of software has been detected on a small number of machines in its lab The researchers collaborate with other machines using port 445 and on the internet using port 443 The unau-thorized software is starting to be seen on additional machines outside of the lab and is making outbound communications using HTTPS and SMS. The security team has been instructed to resolve the issue as quickly as possible while causing minimal disruption to the researchers. Which of the following is the best course Of action in this scenario?

Place the machines with the unapproved software in containment

Update the host firewalls to block outbound Stv1B.

Place the machines with the unapproved software in containment

Place the unauthorized application in a Bocklist.

Implement a content filter to block the unauthorized software communica-tion,

A company's help desk has received calls about the wireless network being down and users being unable to connect to it The network administrator says all access points are up and running One of the help desk technicians notices the affected users are working in a building near the parking lot.Which of the following is the most likely reason for the outage?

Someone near the building is jamming the signal

A user has set up a rogue access point near the building

Someone set up an evil twin access point in the affected area.

The APs in the affected area have been unplugged from the network

Which of the following will increase cryptographic security?

Algorithms that require less computing power

A security analyst is hardening a network infrastructure The analyst is given the following requirements• Preserve the use of public IP addresses assigned to equipment on the core router• Enable "in transport" encryption protection to the web server with the strongest ciphers.Which of the following should the analyst implement to meet these requirements? (Select two).

Configure NAT on the core router.

Enable TLSv2 encryption on the web server

Configure VLANs on the core router

Configure NAT on the core router.

Configure BGP on the core router

Enable AES encryption on the web server

Enable 3DES encryption on the web server

Enable TLSv2 encryption on the web server

During a security incident the security operations team identified sustained network traffic from a malicious IP address: 10.1.4.9 A security analyst is creating an inbound firewall rule to block the IP address from accessing the organization's network. Which of the following fulfills this request?

access-list inbound deny ip source 10.1.4.9/32 destination 0.0.0.0/0

access-list inbound deny ip source 0.0.0.0/0 destination 10.1.4.9/32

access-list inbound deny ip source 10.1.4.9/32 destination 0.0.0.0/0

access-list inbound permit ip source 10.1.4.9/32 destination 0.0.0.0/0

access-list inbound permit ip source 0.0.0.0/0 destination 10.1.4.9/32

A network manager is concerned that business may be negatively impacted if the firewall in its data center goes offline. The manager would like to implement a high availability pair to:

remove the single point of failure.

decrease the mean time between failures.

remove the single point of failure.

cut down the mean time to repair

reduce the recovery time objective

A company's help desk received several AV alerts indicating Mimikatz attempted to run on the remote systems Several users also reported that the new company flash drives they picked up in the break room only have 512KB of storage Which of the following is most likely the cause?

The GPO blocking the flash drives is being bypassed by a malicious flash drive that is attempting to harvest plaintext credentials from memory.

The GPO prevents the use of flash drives, which triggers a false positive AV indication and restricts the drives to only 512KB of storage

The new flash drives need a driver that is being blocked by the AV software because the flash drives are not on the application's allow list, temporarily restricting the drives to 512KB of storage.

The new flash drives are incorrectly partitioned, and the systems are automatically trying to use an unapproved application to repartition the drives.

The GPO blocking the flash drives is being bypassed by a malicious flash drive that is attempting to harvest plaintext credentials from memory.

CompTIA SY0-601 Practice Test 11 - Free Online Exam Prep & Questions

Which of the following terms should be included in a contract to help a company monitor the ongoing security maturity Of a new vendor?

Become a Premium Member for full access

Unlock Premium Member

CompTIA SY0-601 Practice Test 11

Question

CompTIA SY0-601 Practice Tests

Practice Tests