A company is implementing a new SIEM to log and send alerts whenever malicious activity is blocked by its antivirus and web content filters. Which of the following is the primary use case for this scenario?

Implementation of detective controls

Implementation of preventive controls

Implementation of detective controls

Implementation of deterrent controls

Implementation of corrective controls

The Chief Technology Officer of a local college would like visitors to utilize the school's WiFi but must be able to associate potential malicious activity to a specific person. Which of the following would BEST allow this objective to be met?

Deploying a captive portal to capture visitors' MAC addresses and names

Requiring all new, on-site visitors to configure their devices to use WPS

Implementing a new SSID for every event hosted by the college that has visitors

Creating a unique PSK for every visitor when they arrive at the reception area

Deploying a captive portal to capture visitors' MAC addresses and names

A security incident has been resolved Which of the following BEST describes the importance of the final phase of the incident response plan?

It examines and documents how well the team responded discovers what caused the incident, and determines how the incident can be avoided in the future

It returns the affected systems back into production once systems have been fully patched, data restored and vulnerabilities addressed

It identifies the incident and the scope of the breach how it affects the production environment, and the ingress point

It contains the affected systems and disconnects them from the network, preventing further spread of the attack or breach

Which of the following should a technician consider when selecting an encryption method for data that needs to remain confidential for a specific length of time?

The encryption algorithm's longevity

The key length of the encryption algorithm

The encryption algorithm's longevity

A method of introducing entropy into key calculations

The computational overhead of calculating the encryption key

A security analyst is investigating a phishing email that contains a malicious document directed to the company's Chief Executive Officer (CEO). Which of the following should the analyst perform to understand the threat and retrieve possible IoCs?

Install a sandbox to run the malicious payload in a safe environment

Run a vulnerability scan against the CEOs computer to find possible vulnerabilities

Install a sandbox to run the malicious payload in a safe environment

Perform a traceroute to identify the communication path

Use netstat to check whether communication has been made with a remote host

A security analyst was deploying a new website and found a connection attempting to authenticate on the site's portal. While Investigating The incident, the analyst identified the following Input in the username field: Which of the following BEST explains this type of attack?

SQLi on the field to bypass authentication

DLL injection to hijack administrator services

SQLi on the field to bypass authentication

Execution of a stored XSS on the website

Code to execute a race condition on the server

Which of the following would MOST likely be identified by a credentialed scan but would be missed by an uncredentialed scan?

Missing patches for third-party software on Windows workstations and servers.

Vulnerabilities with a CVSS score greater than 6.9.

Critical infrastructure vulnerabilities on non-IP protocols.

CVEs related to non-Microsoft systems such as printers and switches.

Missing patches for third-party software on Windows workstations and servers.

Which of the following are the MOST likely vectors for the unauthorized inclusion of vulnerable code in a software company’s final software releases? (Select TWO.)

Use of penetration-testing utilities

A backdoor was detected on the containerized application environment. The investigation detected that a zero-day vulnerability was introduced when the latest container image version was downloaded from a public registry. Which of the following is the BEST solution to prevent this type of incident from occurring again?

Enforce the use of a controlled trusted source of container images

Deploy an IPS solution capable of detecting signatures of attacks targeting containers

Define a vulnerability scan to assess container images before being introduced on the environment

Create a dedicated VPC for the containerized environment

A help desk technician receives an email from the Chief Information Officer (C/O) asking for documents. The technician knows the CIO is on vacation for a few weeks. Which of the following should the technician do to validate the authenticity of the email?

Hover the mouse over the CIO's email address to verify the email address.

Check the metadata in the email header of the received path in reverse order to follow the email’s path.

Hover the mouse over the CIO's email address to verify the email address.

Look at the metadata in the email header and verify the "From." line matches the CIO's email address.

Forward the email to the CIO and ask if the CIO sent the email requesting the documents.

A grocery store is expressing security and reliability concerns regarding the on-site backup strategy currently being performed by locally attached disks. The main concerns are the physical security of the backup media and the durability of the data stored on these devices Which of the following is a cost-effective approach to address these concerns?

Migrate to a cloud backup solution

Enhance resiliency by adding a hardware RAID.

Move data to a tape library and store the tapes off-site

Install a local network-attached storage.

Migrate to a cloud backup solution

CompTIA SY0-601 Practice Test 3 - Free Online Exam Prep & Questions

A company reduced the area utilized in its datacenter by creating virtual networking through automation and by creating provisioning routes and rules through scripting. Which of the following does this example describe?

laC

MSSP

Containers

SaaS

Comment (0)

CompTIA SY0-601 Practice Test 3

Question

CompTIA SY0-601 Practice Tests

Practice Tests