Which of the following is a security implication of newer 1CS devices that are becoming more common in corporations?

Unauthorized voice and audio recording can cause loss of intellectual property

Devices with celular communication capabilities bypass traditional network security controls

Many devices do not support elliptic-curve encryption algorithms due to the overhead they require.

These devices often lade privacy controls and do not meet newer compliance regulations

Unauthorized voice and audio recording can cause loss of intellectual property

A security investigation revealed mat malicious software was installed on a server using a server administrator credentials. During the investigation the server administrator explained that Telnet was regularly used to log in. Which of the blowing most likely occurred?

A packet capture tool was used to steal the password

A spraying attack was used to determine which credentials to use

A packet capture tool was used to steal the password

A remote-access Trojan was used to install the malware

A directory attack was used to log in as the server administrator

An organization recently released a zero-trust policy that will enforce who is able to remotely access certain dat

Implement agentless NAC on boundary devices.

Authenticated users who access the data must have a need to know, depending on their level of permissions.Which of the following is the first step the organization should take when implementing the policy?

Determine a quality CASB solution.

Configure the DLP policies by user groups.

Implement agentless NAC on boundary devices.

Classify all data on the file servers.

An email security vendor recently added a retroactive alert after discovering a phishing email had already been delivered to an inbox. Which of the following would be the best way for the security administrator to address this type of alert in the future?

Utilize a SOAR playbook to remove the phishing message.

Manually remove the phishing emails when alerts arrive.

Delay all emails until the retroactive alerts are received.

Ingest the alerts into a SIEM to correlate with delivered messages.

A security engineer learns that a non-critical application was compromised. The most recent version of the application includes a malicious reverse proxy while the application is running. Which of the following should the engineer is to quickly contain the incident with the least amount of impact?

Add the application hash to the organization's blocklist.

Configure firewall rules to block malicious inbound access.

Manually uninstall the update that contains the backdoor.

Add the application hash to the organization's blocklist.

Tum off all computers that have the application installed.

A security operations technician is searching the log named /vax/messages for any events that were associated with a workstation with the IP address 10.1.1.1. Which of the following would provide this information?

cat /var/messages | grep 10.1.1.1

grep 10.1.1.1 | cat /var/messages

grep /var/messages | cat 10.1.1.1

cat 10.1.1.1 | grep /var/messages

A security team is providing input on the design of a secondary data center that has the following req uirements:+ Anatural disaster at the primary site should not affect the secondary site. The secondary site should have the capability for failover during traffic surge situations.+ The secondary site must m eet the same physical security requirements as the primary site. The secondary site must provide pro tection against power surges and outages.Which of the following should the security team recommend? (Select two).

Implementing hot and cold aisles at the secondary site

Coniguring replication of the web servers at the primary site to offline storage B. Constructing the secondary site in a geographically disperse location C. Deploying load balancers at the primary site

Using differential backups at the secondary site

Implementing hot and cold aisles at the secondary site

During a recent cybersecurity audit, the auditors pointed out various types of vulnerabilities in the production are

The production area hardware runs applications that are critical to production Which of the following describes what the company should do first to lower the risk to the Production the hardware.

Add a banner page to the hardware.

A manager for the development team is concerned about reports showing a common set of vulnerabilities. The set of vulnerabilities is present on almost all of the applications developed by the team. Which of the following approaches would be most effective for the manager to use to address this issue?

Invest in secure coding training and application security guidelines.

Tune the accuracy of fuzz testing.

Invest in secure coding training and application security guidelines.

Increase the frequency of dynamic code scans 1o detect issues faster.

Implement code signing to make code immutable.

An analyst is working on an investigation with multiple alerts for multiple hosts. The hosts are showing signs of being compromised by a fast-spreading worm. Which of the following should be the next step in order to stop the spread?

Place all known-infected hosts on an isolated network

Disconnect every host from the network.

Scan the hosts that show signs of

Place all known-infected hosts on an isolated network

CompTIA SY0-601 Practice Test 9 - Free Online Exam Prep & Questions

A company that provides an online streaming service made its customers' personal data including names and email addresses publicly available in a cloud storage service. As a result, the company experienced an increase m the number of requests to delete user accounts. Which of the following best describes the consequence of tins data disclosure?

Become a Premium Member for full access

Unlock Premium Member

CompTIA SY0-601 Practice Test 9

Question

CompTIA SY0-601 Practice Tests

Practice Tests