A network engineer is troubleshooting wireless network connectivity issues that were reported by users The issues are occurring only in the section of the building that is closest to the parking lot.Users are intermittently experiencing slow speeds when accessing websites and are unable to connect to network drives. The issues appear to increase when laptop users return to their desks after using their devices in other areas of the building There have also been reports of users being required to enter their credentials on web pages in order to gain access to them Which of the following is the most likely cause of this issue?

An external access point is engaging in an evil-Twin attack

The signal on the WAP needs to be increased in that section of the building

The certificates have expired on the devices and need to be reinstalled

The users in that section of the building are on a VLAN that is being blocked by the firewall

An organization routes all of its traffic through a VPN Most users are remote and connect into a corporate data center that houses confidential information There is a firewall at the internet border, followed by a DLP appliance, the VPN server and the data center itself Which of the following is the weakest design element?

Encrypted VPN traffic will not be inspected when entering or leaving the network.

The DLP appliance should be integrated into a NGFW.

Split-tunnel connections can negatively impact the DLP appliance's performance.

Encrypted VPN traffic will not be inspected when entering or leaving the network.

Adding two hops in the VPN tunnel may slow down remote connections

An administrator is configuring a firewall rule set for a subnet to only access DHCP, web pages, and SFTP, and to specifically block FTP. Which of the following would BEST accomplish this goal?

[Permission Source Destination Port]Allow: Any Any 80 -Allow: Any Any 443 -Allow: Any Any 67 -Allow: Any Any 68 -Allow: Any Any 22 -Deny: Any Any 21 -Deny: Any Any

[Permission Source Destination Port]Allow: Any Any 80 -Allow: Any Any 443 -Allow: Any Any 67 -Allow: Any Any 68 -Deny: Any Any 22 -Allow: Any Any 21 -Deny: Any Any

[Permission Source Destination Port]Allow: Any Any 80 -Allow: Any Any 443 -Allow: Any Any 22 -Deny: Any Any 67 -Deny: Any Any 68 -Deny: Any Any 21 -Allow: Any Any

[Permission Source Destination Port]Allow: Any Any 80 -Allow: Any Any 443 -Deny: Any Any 67 -Allow: Any Any 68 -Allow: Any Any 22 -Allow: Any Any 21 -Allow: Any Any

An organization has hired a red team to simulate attacks on its security pos-ture, which Of following will the blue team do after detecting an IOC?

Activate runbooks for incident response.

Reimage the impacted workstations.

Activate runbooks for incident response.

Conduct forensics on the compromised system,

Conduct passive reconnaissance to gather information

A software development manager wants to ensure the authenticity of the code created by the company. Which of the following options is the most appropriate?

Performing code signing on company-developed software

Testing input validation on the user input fields

Performing code signing on company-developed software

Performing static code analysis on the software

Ensuring secure cookies are used

A technician is setting up a new firewall on a network segment to allow web traffic to the internet while hardening the network. After the firewall is configured, users receive errors stating the website could not be located. Which of the following would best correct the issue?

Ensuring that port 53 has been explicitly allowed in the rule set

Setting an explicit deny to all traffic using port 80 instead of 443

Moving the implicit deny from the bottom of the rule set to the top

Configuring the first line in the rule set to allow all traffic

Ensuring that port 53 has been explicitly allowed in the rule set

A web server has been compromised due to a ransomware attack. Further Investigation reveals the ransomware has been in the server for the past 72 hours. The systems administrator needs to get the services back up as soon as possible. Which of the following should the administrator use to restore services to a secure state?

The last incremental backup that was conducted 72 hours ago

The last known-good configuration stored by the operating system

The last full backup that was conducted seven days ago

Which of the following would help ensure a security analyst is able to accurately measure the overall risk to an organization when a new vulnerability is disclosed?

A full inventory of all hardware and software

Documentation of system classifications

A list of system owners and their departments

Third-party risk assessment documentation

Which of the following supplies non-repudiation during a forensics investigation?

Using a SHA-2 signature of a drive image

Dumping volatile memory contents first

Using a SHA-2 signature of a drive image

Logging everyone in contact with evidence

A user downloaded an extension for a browser, and the user's device later became infected. The analyst who Is Investigating the Incident saw various logs where the attacker was hiding activity by deleting dat

The following was observed running:New-Partition -DiskNumber 2 -UseMaximumSize -AssignDriveLetter C| Format-Volume -Driveletter C - FileSystemLabel 'New'-FileSystem NTFS - Full -Force -Confirm:$falseWhich of the following is the malware using to execute the attack?

As part of the building process for a web application, the compliance team requires that all PKI certificates are rotated annually and can only contain wildcards at the secondary subdomain level. Which of the following certificate properties will meet these requirements?

HTTPS://*.app1.comptia.org, Valid from April 10 00:00:00 2021 - April 8 12:00:00 2022

HTTPS://*.comptia.org, Valid from April 10 00:00:00 2021 - April 8 12:00:00 2022

HTTPS://app1.comptia.org, Valid from April 10 00:00:00 2021 - April 8 12:00:00 2022

HTTPS://*.app1.comptia.org, Valid from April 10 00:00:00 2021 - April 8 12:00:00 2022

HTTPS://'.comptia.org, Valid from April 10 00:00:00 2021 - April 8 12:00:00 2023

A local server recently crashed, and the team is attempting to restore the server from a backup. During the restore process, the team notices the file size of each daily backup is large and will run out of space at the current rate.The current solution appears to do a full backup every night. Which of the following would use the least amount of storage space for backups?

A weekly, full backup with daily incremental backups

A weekly, incremental backup with daily differential backups

A weekly, full backup with daily snapshot backups

A weekly, full backup with daily differential backups

A weekly, full backup with daily incremental backups

An analyst is working on an email security incident in which the target opened an attachment containing a worm. The analyst wants to Implement mitigation techniques to prevent further spread. Which of the following is the best course of action for the analyst to take?

Isolate the infected attachment.

Implement network segmentation.

Utilize email content filtering.

Isolate the infected attachment.

CompTIA SY0-601 Practice Test 12 - Free Online Exam Prep & Questions

A company needs to centralize its logs to create a baseline and have visibility on its security events Which of the following technologies will accomplish this objective?

Become a Premium Member for full access

Unlock Premium Member

CompTIA SY0-601 Practice Test 12

Question

CompTIA SY0-601 Practice Tests

Practice Tests