A client sent several inquiries to a project manager about the delinquent delivery status of some critical reports. The project manager claimed the reports were previously sent via email, but then quickly generated and backdated the reports before submitting them as plain text within the body of a new email message thread. Which of the following actions MOST likely supports an investigation for fraudulent submission?

Reference the data retention policy.

During a Chief Information Security Officer (CISO) convention to discuss security awareness, the attendees are provided with a network connection to use as a resource. As the convention progresses, one of the attendees starts to notice delays in the connection, and the HIIPS site requests are reverting to HTTP Which of the following BEST describes what is happening?

Birthday collision on the certificate key

DNS hijacking to reroute traffic

Brute force to the access point

A retail company that is launching @ new website to showcase the company’s product line and other information for online shoppers registered the following URLs:* www companysite com* shop companysite com* about-us companysite comcontact-us. companysite comsecure-logon company site comWhich of the following should the company use to secure its website if the company is concerned with convenience and cost?

An extended validation certificate

After a phishing scam fora user's credentials, the red team was able to craft payload to deploy on a server. The attack allowed the installation of malicious software that initiates a new remote session Which of the following types of attacks has occurred?

Application programming interface

During an incident, a company's CIRT determines it is necessary to observe the continued network- based transactions between a callback domain and the malware running on an enterprise PC. Which of the following techniques would be BEST to enable this activity while reducing the nsk of lateral spread and the risk that the adversary would notice any changes?

Emulate the malware in a heavily monitored DMZ segment

Physically move the PC to a separate Internet point of presence.

Create and apply microsegmentation rules,

Emulate the malware in a heavily monitored DMZ segment

Apply network blacklisting rules for the adversary domain

A security analyst is responding to an alert from the SIEM. The alert states that malware was discovered on a host and was not automatically deleted. Which of the following would be BEST for the analyst to perform?

Quarantine the host from other parts of the network

Add a deny-all rule to that host in the network ACL

Implement a network-wide scan for other instances of the malware.

Quarantine the host from other parts of the network

Revoke the client's network access certificates

A cybersecurity administrator needs to allow mobile BYOD devices to access network resources. As the devices are not enrolled to the domain and do not have policies applied to them, which of the following are best practices for authentication and infrastructure security? (Select TWO).

Use a captive portal for user authentication.

Authenticate users using OAuth for more resiliency

Create a new network for the mobile devices and block the communication to the internal network and servers

Use a captive portal for user authentication.

Authenticate users using OAuth for more resiliency

Implement SSO and allow communication to the internal network

Use the existing network and allow communication to the internal network and servers.

Use a new and updated RADIUS server to maintain the best solution

An analyst is working on an email security incident in which the target opened an attachment containing a worm. The analyst wants to implement mitigation techniques to prevent further spread. Which of the following is the BEST course of action for the analyst to take?

isolate the infected attachment.

Utilize email content filtering,

isolate the infected attachment.

An organization recently acquired an ISO 27001 certification. Which of the following would MOST likely be considered a benefit of this certification?

It assures customers that the organization meets security standards

It allows for the sharing of digital forensics data across organizations

It provides insurance in case of a data breach

It provides complimentary training and certification resources to IT security staff.

It certifies the organization can work with foreign entities that require a security clearance

It assures customers that the organization meets security standards

A company uses a drone for precise perimeter and boundary monitoring. Which of the following should be MOST concerning to the company?

Cloud storage of telemetry data

Which of the following uses six initial steps that provide basic control over system security by including hardware and software inventory, vulnerability management, and continuous monitoring to minimize risk in all network environments?

The Center for Internet Security

A company was compromised, and a security analyst discovered the attacker was able to get access to a service account. The following logs were discovered during the investigation: Which of the following MOST likely would have prevented the attacker from learning the service account name?

Forward web server logs to a SIEM

The SIEM at an organization has detected suspicious traffic coming a workstation in its internal network. An analyst in the SOC the workstation and discovers malware that is associated with a botnet is installed on the device A review of the logs on the workstation reveals that the privileges of the local account were escalated to a local administrator. To which of the following groups should the analyst report this real-world event?

The vulnerability management team

CompTIA SY0-601 Practice Test 2 - Free Online Exam Prep & Questions

Question 1 / 40

Which of the following environments utilizes dummy data and is MOST likely to be installed locally on a system that allows code to be assessed directly and modified easily with each build?

Production

Test

Staging

Development

Comment (0)

CompTIA SY0-601 Practice Test 2

Question

CompTIA SY0-601 Practice Tests

Practice Tests