An organization relies on third-party videoconferencing to conduct daily business. Recent security changes now require all remote workers to utilize a VPN to corporate resources Which of the following would best maintain high-quality videoconferencing while minimizing latency when connected to the VPN?

Utilizing split tunneling so only traffic for corporate resources is encrypted

Using geographic diversity lo have VPN terminators closer to end users

Utilizing split tunneling so only traffic for corporate resources is encrypted

Purchasing higher bandwidth connections to meet the increased demand

Configuring OoS properly on the VPN accelerators

Which of the following scenarios describes a possible business email compromise attack?

An employee receives a gift card request m an email that has an executive's name m the display held to the email

Employees who open an email attachment receive messages demanding payment m order to access files

A service desk employee receives an email from the HR director asking for log-in credentials lo a cloud administrator account

An employee receives an email with a link to a phishing site that is designed to look like the company's email portal.

The IT department's on-site developer has been with the team for many years. Each lime an application is released; the security team is able to identify multiple vulnerabilities Which of the Mowing would best help the team ensure the application is ready to be released to production?

Submit the application to OA before releasing it.

Limit the use of third-party libraries.

Submit the application to OA before releasing it.

During a recent penetration test, a tester plugged a laptop into an Ethernet port in an unoccupied conference room and obtained a valid IP address. Which of the following would have best prevented this avenue of attack?

Moving printers inside a firewall

Which of the following scenarios best describes a risk reduction technique?

A security control objective cannot be met through a technical change, so the company implements a pokey to train users on a more secure method of operation

A security control objective cannot be met through a technical change, so the company purchases insurance and is no longer concerned about losses from data breaches

A security control objective cannot be met through a technical change, so the company implements a pokey to train users on a more secure method of operation

A security control objective cannot be met through a technical change, so the company performs regular audits to determine it violations have occurred

A security control objective cannot be met through a technical change, so the Chief Information Officer decides to sign off on the risk.

Following a prolonged data center outage that affected web-based sales, a company has decided to move its operations to a private cloud solution The security team has received the following requirements• There must be visibility into how teams are using cloud-based services• The company must be able to identity when data related to payment cards is being sent to the cloud• Data must be available regardless of the end user's geographic location• Administrators need a single pane-of-glass view into traffic and trends Which of the following should the security analyst recommend?

Create firewall rules to restrict traffic to other cloud service providers

Install a DLP solution to monitor data in transit

Configure a web-based content filter

A security administrator received an alert for a user account with the following log activity: Which of the following best describes the trigger for the alert the administrator received?

Number of failed log-in attempts

In which of the following scenarios is tokenization the best privacy technique to use?

Enabling established customers to safely store credit card information

Providing pseudo-anonymization for social media user accounts

Serving as a second factor for authentication requests

Enabling established customers to safely store credit card information

Masking personal information inside databases by segmenting data

A financial analyst is expecting an email containing sensitive information from a client. When the email arrives, the analyst receives an error and is unable to open the encrypted message. Which of the following is the most likely cause of the issue?

The S'MIME plug-m is not enabled.

The SSL certificate has expired.

Secure I MAP was not implemented.

A security analyst has been reading about a newly discovered cyberattack from a known threat actor Which of the following would best support the analyst's review of the tactics, techniques, and protocols the throat actor was observed using in previous campaigns?

The Diamond Model of Intrusion Analysis

A wet-known organization has been experiencing attacks from APTs. The organization is concerned that custom malware is being created and emailed into the company or installed on USB stocks that are dropped in parking lots. Which of the following is the best defense against this scenario?

Implementing application execution in a sandbox for unknown software

Configuring signature-based antivirus to update every 30 minutes

Enforcing S/MIME for email and automatically encrypting USB drives upon assertion

Implementing application execution in a sandbox for unknown software

Fuzzing new files for vulnerabilities if they are not digitally signed

An organization is having difficulty correlating events from its individual AV. EDR. DLP. SWG. WAF, MDM. HIPS, and CASB systems. Which of the following is the best way to improve the situation?

Utilize a SIEM to centralize logs and dashboards.

Remove expensive systems that generate few alerts.

Modify the systems to alert only on critical issues.

Utilize a SIEM to centralize logs and dashboards.

Implement a new syslog/NetFlow appliance.

A security analyst receives a SIEM alert that someone logged in to the app admin test account, which is only used for the early detection of attacks. The security analyst then reviews the following application log: Which of the following can the security analyst conclude?

A replay attack is being conducted against the application.

An injection attack is being conducted against a user authentication system.

A service account password may have been changed, resulting in continuous failed logins within the application.

A credentialed vulnerability scanner attack is testing several CVEs against the application.

CompTIA SY0-601 Practice Test 15 - Free Online Exam Prep & Questions

A user's login credentials were recently compromised During the investigation, the security analyst determined the user input credentials into a pop-up window when prompted to confirm the username and password However the trusted website does not use a pop-up for entering user colonials Which of the following attacks occurred?

Become a Premium Member for full access

Unlock Premium Member

CompTIA SY0-601 Practice Test 15

Question

CompTIA SY0-601 Practice Tests

Practice Tests