CompTIA CompTIA Certifications SY0-601 Questions & Answers

• Question 1171:

  An organization wants seamless authentication to its applications. Which of the following should the organization employ to meet this requirement?

  A. SOAP

  B. SAML

  C. SSO

  D. Kerberos

  Correct Answer: C

• Question 1172:

  A major clothing company recently lost a large amount of proprietary information. The security officer must find a solution to ensure this never happens again. Which of the following is the BEST technical implementation to prevent this from happening again?

  A. Configure DLP solutions

  B. Disable peer-to-peer sharing

  C. Enable role-based access controls.

  D. Mandate job rotation

  E. Implement content filters

  Correct Answer: A

  Makes the most sense implementing a DLP solution wont allow this Proprietary information be leaked or sent from the inside of the company.

• Question 1173:

  A security analyst must enforce policies to harden an MDM infrastructure. The requirements are as follows:

  1.

  Ensure mobile devices can be tracked and wiped.

  2.

  Confirm mobile devices are encrypted.

  Which of the following should the analyst enable on all the devices to meet these requirements?

  A. Geofencing

  B. Biometric authentication

  C. Geolocation

  D. Geotagging

  Correct Answer: A

• Question 1174:

  A security researcher is tracking an adversary by noting its attacks and techniques based on its capabilities, infrastructure, and victims. Which of the following is the researcher MOST likely using?

  A. The Diamond Mode! of Intrusion Analysis

  B. The Cyber Kill Chain e

  C. The MITRE CVE database

  D. The incident response process

  Correct Answer: A

  Reference: https://cyware.com/educational-guides/incident-response/what-is-the-diamond-model-of-intrusion-analysis-5f02

• Question 1175:

  Aconbgany uses a drone for precise perimeter and boundary monitoring. Which of the following should be MOST conceming to the company?

  A. Privacy

  B. Cloud storage of telemetry data

  C. GPS spoofing

  D. Weather events

  Correct Answer: C

• Question 1176:

  If a current private key is compromised, which of the following would ensure it cannot be used to decrypt all historical data?

  A. Perfect forward secrecy

  B. Elliptic-curve cryptography

  C. Key stretching

  D. Homomorphic encryption

  Correct Answer: A

  What is Perfect Forward Secrecy?

  Perfect forward secrecy helps protect session keys against being compromised even when the server's private key may be vulnerable. A feature of specific key agreement protocols, an encryption system with forward secrecy generates a

  unique session key for every user initiated session. In this way, should any single session key be compromised, the rest of the data on the system remains protected. Only the data guarded by the compromised key is vulnerable.

  Before perfect forward secrecy, the Heartbleed bug affected OpenSSL, one of the common SSL/TLS protocols. With forward secrecy in place, even man-in-the-middle attacks and similar attempts fail to retrieve and decrypt sessions and

  communications despite compromise of passwords or secret long-term keys.

  Reference:

  https://avinetworks.com/glossary/perfect-forward-secrecy/#:~:text=Perfect%20Forward%20Secrecy%20(PFS)%2C,of%20sensitive%20data%20is%20exposed

• Question 1177:

  An enterpnse has hired an outside security firm to facilitate penetration testing on its network and applications. The firm has agreed to pay for each vulnerability that ts discovered. Which of the following BEST represents the type of testing that is being used?

  A. White-box

  B. Red-leam

  C. Bug bounty

  D. Gray-box

  E. Black-box

  Correct Answer: C

  A bug bounty program provides a monetary incentive for security researchers to discover vulnerabilities. One of the benefits is that bug bounty programs only pay researchers when they find vulnerabilities. Companies don't pay researchers for their time.

  Reference: https://en.wikipedia.org/wiki/Bug_bounty_program

• Question 1178:

  Which of the following disaster recovery tests is the LEAST time consuming for the disaster recovery team?

  A. Tabletop

  B. Parallel

  C. Full interruption

  D. Simulation

  Correct Answer: A

  Its Tabletop exercise , the simulation is more time consuming.Tabletop , is the cheapest and fastets, after walktrough(from memory) and then simulation (more recources, tedious,time consuming)

• Question 1179:

  A security analyst is investigating multiple hosts that are communicating to external IP addresses during the hours of 2:00 a.m - 4:00 am. The malware has evaded detection by traditional antivirus software. Which of the following types of malware is MOST likely infecting the hosts?

  A. A RAT

  B. Ransomware

  C. Polymophic

  D. A worm

  Correct Answer: C

• Question 1180:

  A security researcher has alerted an organization that its sensitive user data was found for sale on a website. Which of the following should the organization use to inform the affected parties?

  A. An incident response plan

  B. A communications plan

  C. A business continuity plan

  D. A disaster recovery plan

  Correct Answer: A