CompTIA CompTIA Certifications SY0-601 Questions & Answers

• Question 1241:

  Various stakeholders are meeting to discuss their hypothetical roles and responsibilities in a specific situation, such as a security incident or major disaster. Which of the following best describes this meeting?

  A. Penetration test

  B. Continuity of operations planning

  C. Tabletop exercise

  D. Simulation

  Correct Answer: C

• Question 1242:

  Which of the following threat actors is most likely to use a high level of sophistication and potentially zero-day exploits to target organizations and systems?

  A. APT groups

  B. Script kiddies

  C. Hacktivists

  D. Ethical hackers

  Correct Answer: A

• Question 1243:

  A company is implementing a vendor's security tool in the cloud. The security director does not want to manage users and passwords specific to this tool but would rather utilize the company's standard user directory. Which of the following should the company implement?

  A. 802.1X

  B. SAML

  C. RADIUS

  D. CHAP

  Correct Answer: B

  Based on the information provided, the company should implement SAML as the protocol for exchanging authentication and authorization data between the coud-based security tool and the company's user directory. SAML is an open-standard protocol that uses HTTP or HTTPS as the transport protocol and can encrypt all the data sent between the identity provider (idP) and the service provider. SAML also enables Single Sign-On (SSO), which means that users do not have to enter their credentials multiple times for different applications.

• Question 1244:

  An organization wants to ensure it can track changes between software deployments. Which of the following concepts should the organization implement?

  A. Continuous monitoring

  B. Rights management

  C. Non-repudiation

  D. Version control

  Correct Answer: D

• Question 1245:

  A company has implemented a policy that requires two people to agree in order to push any changes from the test codebase repository into production. Which of the following best describes this control type?

  A. Detective

  B. Technical

  C. Physical

  D. Operational

  Correct Answer: D

• Question 1246:

  A security analyst is looking for a way to categorize and share a threat actor's TTPs with colleagues at a partner organization. Which of the following would be the best method to achieve this goal?

  A. Releasing the lessons-learned report

  B. Using the MITRE ATTandCK framework

  C. Sharing the CVE IDs used in attacks

  D. Sending relevant log files and pcaps

  Correct Answer: B

  B. Using the MITRE ATTandCK framework MITRE ATTandCK provides a standardized way to categorize and share information about threat actors' Tactics, Techniques, and Procedures (TTPs). This framework would be a suitable method for a security analyst to categorize and share information about a threat actor's TTPs with colleagues at a partner organization.

• Question 1247:

  A systems administrator wants to add a second factor to the single sign-on portal that the organization uses. Currently, only a username and password are required. Which of the following should the administrator implement to best meet this requirement?

  A. Personal verificationQuestions

  B. Software-based TOTP

  C. Log-in image checks

  D. Secondary PIN code

  Correct Answer: B

  A. Personal verificationQuestions - something you know

  B. Software-based TOTP - something you have

  C. Log-in image checks - something you know

  D. Secondary PIN code - something you know

• Question 1248:

  A company needs to keep the fewest records possible, meet compliance needs, and ensure destruction of records that are no longer needed. Which of the following best describes the policy that meets these requirements?

  A. Security policy

  B. Classification policy

  C. Retention policy

  D. Access control policy

  Correct Answer: C

• Question 1249:

  A systems administrator is considering switching from tape backup to an alternative backup solution that would allow data to be readily available in the event of a disaster. Which of the following backup types should the administrator implement?

  A. Copy

  B. Incremental

  C. Cloud

  D. Disk

  E. Storage area network

  Correct Answer: C

• Question 1250:

  The security team installed video cameras in a prominent location in the building lobby. Which of the following best describe this type of control? (Choose two.)

  A. Technical

  B. Detective

  C. Deterrent

  D. Managerial

  E. Compensating

  F. Corrective

  Correct Answer: BC