A security architect is required to deploy to conference rooms some workstations that will allow sensitive data to be displayed on large screens. Due to the nature of the data, it cannot be stored in the conference rooms. The file share is located in a local data center. Which of the following should the security architect recommend to best meet the requirement?

Full drive encryption and thick clients

While troubleshooting a firewall configuration, a technician determines that a 'deny any' policy should be added to the bottom of the ACL. The technician updates the policy, but the new policy causes several company servers to become unreachable. Which of the following actions would prevent this issue?

Testing the policy in a non-production environment before enabling the policy in the production network

Documenting the new policy in a change request and submitting the request to change management

Testing the policy in a non-production environment before enabling the policy in the production network

Disabling any intrusion prevention signatures on the 'deny any' policy prior to enabling the new policy

Including an 'allow any' policy above the 'deny any' policy

An organization has hired a red team to simulate attacks on its security pos-ture, which Of following will the blue team do after detecting an IOC?

Activate runbooks for incident response.

Reimage the impacted workstations.

Activate runbooks for incident response.

Conduct forensics on the compromised system,

Conduct passive reconnaissance to gather information

Which of the following best reduces the security risks introduced when running systems that have expired vendor support and lack an immediate replacement?

Implement proper network access restrictions.

Classify the system as shadow IT.

Increase the frequency of vulnerability scans.

A company recently suffered a breach in which an attacker was able to access the internal mail servers and directly access several user inboxes. A large number of email messages were later posted online. Which of the following would bast prevent email contents from being released should another breach occur?

Implement S/MIME to encrypt the emails at rest.

Enable full disk encryption on the mail servers.

Use digital certificates when accessing email via the web.

Configure web traffic to only use TLS-enabled channels.

A security analyst needs to implement security features across smartphones. laptops, and tablets.Which of the following would be the most effective across heterogeneous platforms?

Removing administrative permissions

A security analyst discovers that a company's username and password database were posted on an internet forum. The usernames and passwords are stored in plaintext. Which of the following would mitigate the damage done by this type of data exfiltration in the future?

Create DLP controls that prevent documents from leaving the network.

Configure the web content filter to block access to the forum.

Increase password complexity requirements.

A help desk technician receives a phone call from someone claiming to be a part of the organization's cybersecurity incident response team. The caller asks the technician to verify the network's internal firewall IP address. Which of the following is the technician's best course of action?

Write down the phone number of the caller if possible, the name of the person requesting the information, hang up, and notify the organization's cybersecurity officer.

Direct the caller to stop by the help desk in person and hang up declining any further requests from the caller.

Ask for the caller's name, verify the person's identity in the email directory, and provide the requested information over the phone.

Write down the phone number of the caller if possible, the name of the person requesting the information, hang up, and notify the organization's cybersecurity officer.

Request the caller send an email for identity verification and provide the requested information via email to the caller.

A security analyst receives alerts about an internal system sending a large amount of unusual DNS queries to systems on the internet over short periods of time during non-business hours. Which of the following is most likely occurring?

A worm is propagating across the network.

Ransomware is encrypting files.

CompTIA SY0-601 Practice Test 13 - Free Online Exam Prep & Questions

An audit report indicates multiple suspicious attempts to access company resources were made. These attempts were not detected by the company. Which of the following would be the best solution to implement on the company's network?

Become a Premium Member for full access

Unlock Premium Member

CompTIA SY0-601 Practice Test 13

Question

CompTIA SY0-601 Practice Tests

Practice Tests