Practice Free CompTIA SY0-601 Exam Questions Online, SY0-601 Free Demo

Question No : 1
Which of the following control sets should a well-written BCP include? (Select THREE)

A.Preventive
B.Detective
C.Deterrent
D.Corrective
E.Compensating
F.Physical
G.Recovery

Answer:

Question No : 2
Which of the following BEST describes the MFA attribute that requires a callback on a predefined landline?

A.Something you exhibit
B.Something you can do
C.Someone you know
D.Somewhere you are

Answer:

Question No : 3
Which of the following would a European company interested in implementing a technical, hands-on set of security standards MOST likely choose?

A.GOPR
B.CIS controls
C.ISO 27001
D.ISO 37000

Answer:

Question No : 4
An administrator needs to protect user passwords and has been advised to hash the passwords.
Which of the following BEST describes what the administrator is being advised to do?

A.Perform a mathematical operation on the passwords that will convert them into unglue stings
B.Add extra data to the passwords so their length is increased, making them harder to brute force
C.Store all passwords in the system in a rainbow table that has a centralized location
D.Enforce the use of one-time passwords that are changed for every login session.

Answer:

Question No : 5
During an incident response, a security analyst observes the following log entry on the web server.

Which of the following BEST describes the type of attack the analyst is experience?

A.SQL injection
B.Cross-site scripting
C.Pass-the-hash
D.Directory traversal

Answer:

Question No : 6
A company Is planning to install a guest wireless network so visitors will be able to access the Internet. The stakeholders want the network to be easy to connect to so time is not wasted during meetings. The WAPs are configured so that power levels and antennas cover only the conference rooms where visitors will attend meetings.
Which of the following would BEST protect the company's Internal wireless network against visitors accessing company resources?

A.Configure the guest wireless network to be on a separate VLAN from the company's internal wireless network
B.Change the password for the guest wireless network every month.
C.Decrease the power levels of the access points for the guest wireless network.
D.Enable WPA2 using 802.1X for logging on to the guest wireless network.

Answer:

Question No : 7
The following are the logs of a successful attack.

Which of the following controls would be BEST to use to prevent such a breach in the future?

A.Password history
B.Account expiration
C.Password complexity
D.Account lockout

Answer:

Question No : 8
A security analyst is evaluating the risks of authorizing multiple security solutions to collect data from the company's cloud environment.
Which of the following is an immediate consequence of these integrations?

A.Non-compliance with data sovereignty rules
B.Loss of the vendor's interoperability support
C.Mandatory deployment of a SIEM solution
D.Increase in the attack surface

Answer:

Question No : 9
A security administrator is setting up a SIEM to help monitor for notable events across the enterprise.
Which of the following control types does this BEST represent?

A.Preventive
B.Compensating
C.Corrective
D.Detective

Answer:

Question No : 10
A security incident has been resolved.
Which of the following BEST describes the importance of the final phase of the incident response plan?

A.It examines and documents how well the team responded discovers what caused the incident, and determines how the incident can be avoided in the future
B.It returns the affected systems back into production once systems have been fully patched, data restored and vulnerabilities addressed
C.It identifies the incident and the scope of the breach how it affects the production environment, and the ingress point
D.It contains the affected systems and disconnects them from the network, preventing further spread of the attack or breach

Answer:

Test Online Free CompTIA SY0-601 Exam Questions and Answers