A new security engineer has started hardening systems. One of the hardening techniques the engineer is using involves disabling remote logins to the NAS. Users are now reporting the inability to use SCP to transfer files to the NAS, even through the data is still viewable from the user’s PCs. Which of the following is the most likely cause of this issue?

SSH was turned off instead of modifying the configuration file

TFTP was disabled on the local hosts

SSH was turned off instead of modifying the configuration file

Remote login was disabled in the networkd.config instead of using the sshd.conf

Network services are no longer running on the NAS

A security engineer is reviewing the logs from a SAML application that is configured to use MFA, during this review the engineer notices a high volume of successful logins that did not require MFA from users who were traveling internationally. The application, which can be accessed without a VPB, has a policy that allows time-based tokens to be generated. Users who changed locations should be required to reauthenticate but have been Which of the following statements BEST explains the issue?

The user’s IP address is changing between logins, bur the application is not invalidating the token

OpenID is mandatory to make the MFA requirements work

An incorrect browser has been detected by the SAML application

The access device has a trusted certificate installed that is overwriting the session token

The user’s IP address is changing between logins, bur the application is not invalidating the token

The help desk has received calls from users in multiple locations who are unable to access core network services The network team has identified and turned off the network switches using remote commands. Which of the following actions should the network team take NEXT?

Initiate the organization's incident response plan.

Disconnect all external network connections from the firewall

Send response teams to the network switch locations to perform updates

Turn on all the network switches by using the centralized management software

Initiate the organization's incident response plan.

A security researcher is using an adversary's infrastructure and TTPs and creating a named group to track those targeted Which of the following is the researcher MOST likely using?

The Diamond Model of Intrusion Analysis

A security analyst is reviewing the vulnerability scan report for a web server following an incident. The vulnerability that was used to exploit the server is present in historical vulnerability scan reports, and a patch is available for the vulnerability. Which of the following is the MOST likely cause?

Security patches were uninstalled due to user impact.

An adversary altered the vulnerability scan reports

A zero-day vulnerability was used to exploit the web server

The scan reported a false negative for the vulnerability

A company recently decided to allow its employees to use their personally owned devices for tasks like checking email and messaging via mobile applications. The company would like to use MDM, but employees are concerned about the loss of personal dat

Configure the MDM software to enforce the use of PINs to access the phone.

Which of the following should the IT department implement to BEST protect the company against company data loss while still addressing the employees’ concerns?

Enable the remote-wiping option in the MDM software in case the phone is stolen.

Configure the MDM software to enforce the use of PINs to access the phone.

Configure MDM for FDE without enabling the lock screen.

Perform a factory reset on the phone before installing the company's applications.

A security team suspects that the cause of recent power consumption overloads is the unauthorized use of empty power outlets in the network rack Which of the following options will mitigate this issue without compromising the number of outlets available?

Adding a new UPS dedicated to the rack

Using only a dual power supplies unit

Increasing power generator capacity

As part of annual audit requirements, the security team performed a review of exceptions to the company policy that allows specific users the ability to use USB storage devices on their laptops The review yielded the following results.• The exception process and policy have been correctly followed by the majority of users• A small number of users did not create tickets for the requests but were granted access• All access had been approved by supervisors.• Valid requests for the access sporadically occurred across multiple departments.• Access, in most cases, had not been removed when it was no longer neededWhich of the following should the company do to ensure that appropriate access is not disrupted but unneeded access is removed in a reasonable time frame?

Create an automated, monthly attestation process that removes access if an employee's supervisor denies the approval

Remove access for all employees and only allow new access to be granted if the employee's supervisor approves the request

Perform a quarterly audit of all user accounts that have been granted access and verify the exceptions with the management team

Implement a ticketing system that tracks each request and generates reports listing which employees actively use USB storage devices

Which of the following would satisfy three-factor authentication requirements?

Password, fingerprint scan, and physical token

Password, PIN, and physical token

PIN, fingerprint scan, and ins scan

Password, fingerprint scan, and physical token

PIN, physical token, and ID card

CompTIA SY0-601 Practice Test 5 - Free Online Exam Prep & Questions

Question 1 / 40

A security administrator wants to implement a program that tests a user's ability to recognize attacks over the organization's email system Which of the following would be BEST suited for this task?

Social media analysis

Annual information security training

Gamification

Phishing campaign

Comment (0)

CompTIA SY0-601 Practice Test 5

Question

CompTIA SY0-601 Practice Tests

Practice Tests